who-sudod Reveals Which Process Is Asking for Your macOS Password

Developer zats open-sourced who-sudod, a macOS tool showing the full process chain behind sudo/Touch ID prompts—a growing concern as background AI agents can trigger local authentication. The repo includes a PAM module, terminal sudo reader, installer, and tests, with auditable source.

2026-09-05 ~ 2026-09-05 · 3 related posts

• who-sudod: Open-Source Tool Reveals Which Process Triggered macOS sudo/TouchID Prompts — zats · 2026-09-05
• who-sudod Source on GitHub: Audit macOS Auth Prompts Down to the Call Chain — zats · 2026-09-05
• Who Sudo'd Exposes Full Call Chains Behind macOS Sudo and Touch ID Prompts, a Growing Concern With AI Agents — SIGKITTEN · 2026-09-05