Saturday, November 25th 2006
Hackers debut adware that only affects Mac OS X 10
F-Security labs has discovered how to install adware on Macintosh OS X 10. The adware (called iAdware) loads itself with each program as a system library. The adware only needs copy permissions to install, so it does not need administrator privileges to be installed. Compared to some adware for the PC, iAdware is relatively harmless. The proof-of-concept bug launches a web browser window when any program is launched. F-Secure says that a prompt to install system library files would effectively stop iAdware from installing.
Source:
F-Secure
16 Comments on Hackers debut adware that only affects Mac OS X 10
And how is that going to be done?
In other words, if the user has to manually execute the exploit, its not an exploit in my book. Just an end user security issue caused by idiots.
yeah, if I open a command window from windows and delete my windows folder, does that mean its a security risk too? :banghead: (then again, thats why we don't give users a command prompt ability in a networked enviroment... too bad it has to manually disabled too.)
Its impossible to protect against the idiot user...
Which is why i have a job. :roll:
Thing is, its much more difficult in OS X to do something that is trivial in windows, with an exploit like this.
You cannot just "add" it to startup, as that prompts for the user password... eliminating that way of executing the file..
so unless the user authorizes its addition, AND manually executes it, it cant be exploited by any known means...
But if the user authorizes it and manually executes it................Its not different than anything else..
I had to laugh at iAdWare, just like I will laught at iVirus, and iDiots.
Again, reading the post helps you fully understand what it is... Its a THEORETICAL flaw, that has yet to actually be exploited. Chances are it will get a patch before anyone has the chance to find a flaw that allows direct exploitation.
The chances of a zero day impacting os x, or windows is still significantly larger on the windows side, so I really don't see your point.
Not exactly helpful to someone wanting to do harm :laugh:
:toast: