Case study
Siriously: recovering macOS Writing Tools entry points
Siriously investigates how macOS 27 changed access to Writing Tools and restores its popover through a Services client. The author used Objective-C runtime introspection and behavioral tracing to identify private WritingToolsUI classes, then passes selected text to the popover and writes accepted results back through Accessibility APIs. The findings concern one macOS build.
- Targets
- App · Binary
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
Requirements & limits
- Prerequisites: A Mac with Apple Intelligence and the new Siri enabled is required.
- Prerequisites: Accessibility permission is required to read selections and write results back.
- Scope: The author reports operation on macOS 27.0 build 26A5368g on arm64.
- Limits: Private framework behavior can change with OS updates.
- License: MIT license.
About this entry
The description was reviewed against primary sources.
Primary sources
- FINDINGS.md GitHub · bo2themax/Siriously · Revision 01c29a7
- README.md GitHub · bo2themax/Siriously · Revision 01c29a7
More in Apps
- tuya-mobile: a Python reconstruction of Tuya app signing and API calls · Case study
- ddg-tenor-bridge: replacing Gboard's Tenor search endpoint · Case study
- MSP CSV Export Format: reconstructing My Stocks Portfolio exports · Case study
- Benro Polaris Firmware Patcher: rebuilding camera control and mapping the app protocol · Case study
- Malware Analysis: a trojanized FL Studio installer and Go stealer · Case study
- grsimwrite-mac: reconstructing GRSIMWrite for macOS · Case study