
On Thursday, antivirus firm F-Secure published a brief analysis of a
proof-of-concept adware program for the Mac OS X that could theoretically hook into any application to run attacker-specified code. The program, dubbed IAdware by F-Secure, could be silently installed in a user's account without requiring administrator rights.
"We won't disclose the exact technique used here - it's a feature not a bug - but let's just say that installing a System Library shouldn't be allowed without prompting the user," stated F-Secure in the blog post.
"Especially as it only requires copy permissions." My take: I'd say, hand over the code, then we'll talk.
Member since:
2005-07-13
If someone modifies a "proof-of-concept" code created by F-Secure or Secunia etc. to create a real threat. Can Apple take some action against(sue?) them for creating it in the first place?