TFA addressed that. For the regular folk, this will be fine. For security researchers, it&#x27;s a big flag that will let malware change its behavior.<p>He also posted a handy screenshot that shows Dtrace not working on some binaries even with SIP completely off.