From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-3.4 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,FREEMAIL_FROM,MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED, UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 10884 invoked from network); 6 Oct 2020 06:38:26 -0000 Received: from zero.zsh.org (2a02:898:31:0:48:4558:7a:7368) by inbox.vuxu.org with ESMTPUTF8; 6 Oct 2020 06:38:26 -0000 ARC-Seal: i=1; cv=none; a=rsa-sha256; d=zsh.org; s=rsa-20200801; t=1601966306; b=J0uK/Q0PK4gCdt6gddU6Q2EKiJLr3N96jofLcOMtH8TUEzlRJ0YdoCU4KoEAUFAhZjWcVhxV2N v9fVSxTk3JX+GTdVaFQkITc9kWXYlJ349QErOZdt+bF/MnQ0S/vV7T9lyK42TlnOl9xReVnsZF Ch4quHoZm7CMV46T89pC1cggpI+Oloc0CbMC949DDdhVlzk6AQrKiuWRCadfl+t5QLkfEMr2KQ dnYgbHXqIOt6p/zhG9+XY++/2KzWb8X+s1EFML2sR0ycDG8iuzn/1euSv/TebMgITqLLRCFAtX nNGtmuBrTgxO7bt+0YVKcUubSorRqcPR4SMfzF0pBeXNbA==; ARC-Authentication-Results: i=1; zsh.org; iprev=pass (mail-io1-f48.google.com) smtp.remote-ip=209.85.166.48; dkim=pass header.d=gmail.com header.s=20161025 header.a=rsa-sha256; dmarc=pass header.from=gmail.com; arc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed; d=zsh.org; s=rsa-20200801; t=1601966306; bh=yNrT/Hquhw4UYyETGXugHxBRKhr2atLC6r4Cz6IsOCM=; h=List-Archive:List-Owner:List-Post:List-Unsubscribe:List-Subscribe:List-Help: List-Id:Sender:Content-Transfer-Encoding:Content-Type:Cc:To:Subject: Message-ID:Date:From:In-Reply-To:References:MIME-Version:DKIM-Signature: DKIM-Signature; b=CJhcSPZ7wrNVCQSSQErk9JYBemDOzt/XPoLa6NAlBqs1ek41Oeqxq29A2+xmS42tjbCLvkCSqL Fnrvke9WF3O1W7fbN7vBVCjDlSOBqLdbs4nMJpB6cLfz0z5XpsuWXUgNKMHLjMP2dTqBudy8h/ 60U4yzIkyzq95ZnBXUfS962iiA/Qvs9oe/TAY4KFqIfJI6QhwAFHzTN1wsF1UeRoe43yxACYic OdLJLUv0dakLmG5ZEzFF6rq+QKWZwSfIrwAVvJwG40pIKW3AfLZ3K52vSmtApYrA7PjjiijEGD Eg1surVClVnc8VP+N81By7dbGvP48lZaBlhaycPrTa2qww==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=zsh.org; s=rsa-20200801; h=List-Archive:List-Owner:List-Post:List-Unsubscribe: List-Subscribe:List-Help:List-Id:Sender:Content-Transfer-Encoding: Content-Type:Cc:To:Subject:Message-ID:Date:From:In-Reply-To:References: MIME-Version:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID; bh=yNrT/Hquhw4UYyETGXugHxBRKhr2atLC6r4Cz6IsOCM=; b=UwOmF+XlGDprdd3XejmxJH5N+4 PTZ6SIIo7JKJkdGYF1EMIGYi8YmaXxAgycP/s/RxK2owIHKqVhNYYuQgXzOKIKQysAn4CVA6cQ17v dGPVFGI1/7ZKRAYAeql7aZSlNugbA7mLd0IrdkG8bmy+t2pWEWQFlQMuPq28mes+BUY3q8APmayUd nMDjuunZE2q612v9WfyxhfrGqpaRUUH78z9mS4WPs74wfMpg0qkJTclCiTMZG2+sBx4siswIk4IYo C4kTWKhZ7btINoB8d2OrboIxIrggy+qn7dNwj9OJVttN18y0pEFm4TAjrbgyyeme5TRo1OFXJjdhW ze4qv1kA==; Received: from authenticated user by zero.zsh.org with local id 1kPgcC-0000TY-Gs; Tue, 06 Oct 2020 06:38:24 +0000 Authentication-Results: zsh.org; iprev=pass (mail-io1-f48.google.com) smtp.remote-ip=209.85.166.48; dkim=pass header.d=gmail.com header.s=20161025 header.a=rsa-sha256; dmarc=pass header.from=gmail.com; arc=none Received: from mail-io1-f48.google.com ([209.85.166.48]:40304) by zero.zsh.org with esmtps (TLS1.3:TLS_AES_128_GCM_SHA256:128) id 1kPgbs-0000KR-FB; Tue, 06 Oct 2020 06:38:05 +0000 Received: by mail-io1-f48.google.com with SMTP id k25so11855502ioh.7 for ; Mon, 05 Oct 2020 23:38:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=yNrT/Hquhw4UYyETGXugHxBRKhr2atLC6r4Cz6IsOCM=; b=syW1aFEvhyvU7sn4EW3ogT4rZI+hIxZFJdoe1ZJIcKFoCakp37hd2NTyUBI1ovkW+X jZwCJrjIEUvdw0ZuguMh+mJUEr6iXl1BFAyZ+WygT8Lgrsrm0ymfI2FeZ29+PJvDvpO9 /t5HYnkYJZc8yAViUO8dTmOsWUm3R4qjm4PAlsZDMyzlz5MIKnYscLkLpJ7Jn73VfkEE IrVSbE04+59C9w2xbD7VuD/S3tNIVHBwg/dyh6Snpb7+5TCrIoiARphaCHG652JmSDra eBfE1GwyEnxfSRb5Mk8QxqhXCdY/Vn/nETkOLU2v08egbQSHm5b/m6wHDYTPlPz7mXTh b8Hg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=yNrT/Hquhw4UYyETGXugHxBRKhr2atLC6r4Cz6IsOCM=; b=E4ap6I8ZP0cmuAztla0Q6/SlGJXuJQdHGP5D5jVbzqtxPyrfzzJmbbWJsK4jIxXaTg 78Uci8jBwJB19AsLxfAtrUx+0yE16/Nmyj8Q4jkN7+Amxl7+YoYmPD6IIOPS1Mu8qQ6w GCeB+UiKHpHKLO/cySoyb8R6Ueu1h6quGUh0gXDXall2DraMnZtdIXqofWPdSjZCnSXt IgkaC2/awkz3LMyr4iohUk+FjcGx6OPoXJ97ZHsrIVdELgEhNRLoocUw80SPWJADBJvt U7t/AVD/VOlBu9Cn41zAHop2CLgddlUZIi6xn8YDokjDZOGnn3wQ4h8fX/G7P8AWojRY kSHg== X-Gm-Message-State: AOAM533dc09Sj7MI1v8sdkpAj0p+HxfqLEzI4VCHinLbXiEJ1AqwN65h v+R0ezkW7DAGXp2f+lKHGhmecxEHU5U44jSabLA= X-Google-Smtp-Source: ABdhPJwb8JCuAovaTsw61TsJHDTJBPBuzuwLb7H2CB8bwEahIG4zFYPM7hCbCQ5B8H1wei/CSEimHun0ZbCQ3tDWkzs= X-Received: by 2002:a02:c8d1:: with SMTP id q17mr2550752jao.127.1601966282706; Mon, 05 Oct 2020 23:38:02 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Roman Perepelitsa Date: Tue, 6 Oct 2020 08:37:56 +0200 Message-ID: Subject: Re: Possible hacking To: Yaye San Cc: Zsh hackers list Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Seq: 47425 Archived-At: X-Loop: zsh-workers@zsh.org Errors-To: zsh-workers-owner@zsh.org Precedence: list Precedence: bulk Sender: zsh-workers-request@zsh.org X-no-archive: yes List-Id: List-Help: List-Subscribe: List-Unsubscribe: List-Post: List-Owner: List-Archive: Archived-At: On Tue, Oct 6, 2020 at 12:33 AM Yaye San wrote: > > Hello, I=E2=80=99ve received a pop-up of certain login to convert the Mac= =E2=80=99s shell to zsh but I didn=E2=80=99t request it This pop-up is not produced by zsh. Whether it's indicative of hacking or not, reporting it to the developers of zsh via zsh-workers@zsh.org is unwarranted. Starting with macOS Catalina, macOS uses zsh as the default login shell. Bash users are presented with the message "The default interactive shell is now zsh", followed by some additional text, whenever they start the shell. This message has been put in place by Apple. You can find additional details at https://support.apple.com/en-us/HT208050. Roman.