Linked by Thom Holwerda on Fri 24th Nov 2006 20:06 UTC, submitted by hamster
Mac OS X On Thursday, antivirus firm F-Secure published a brief analysis of a proof-of-concept adware program for the Mac OS X that could theoretically hook into any application to run attacker-specified code. The program, dubbed IAdware by F-Secure, could be silently installed in a user's account without requiring administrator rights. "We won't disclose the exact technique used here - it's a feature not a bug - but let's just say that installing a System Library shouldn't be allowed without prompting the user," stated F-Secure in the blog post. "Especially as it only requires copy permissions." My take: I'd say, hand over the code, then we'll talk.
Thread beginning with comment 185176
To read all comments associated with this story, please click here.
A good thing
by ValiantSoul on Sat 25th Nov 2006 00:03 UTC
ValiantSoul
Member since:
2005-07-20

"My take: I'd say, hand over the code, then we'll talk."

F-Secure is a good team of people and the fact that they are not distributing this is a good thing. From what I can see, their intension is to help Apple secure OS X (and are probably talking with them on ways to do it) and not to sell a product. I wouldn't consider this a worry, an advertisement, or anything other than something to help push forward with a more secure future.

RE: A good thing
by vicious1 on Sat 25th Nov 2006 17:07 in reply to "A good thing"
vicious1 Member since:
2006-11-10

uhm, about the "good team of people" I beg to differ, I know for a fact (i know 2 people who worked there in different departments, one in virus research and one in production) that that is not the case. Generally F-Secure is all about publicity. They have their front man Mikko and thats about it. Their Anti Spyware suite is the bought Adaware database and their AntiVirus is the Kaspersky database. Do they work with both companies, probably but they dont do much "in-house". I wrote an article a couple of days ago about this subject. It is all about fear from the Anti-everything vendors. (on my blog http://blog.2blocksaway.com is the article if anyone cares to read it)

Reply Parent Bookmark Score: 1