Dear @EU_Commission,
A US company has backdoored countless computers belonging to EU citizens. Your response?http://applehelpwriter.com/2016/08/29/discovering-how-dropbox-hacks-your-mac/ …
-
-
It's easy to prove Dropbox is using a standard OS X authorization dialog by sampling the process when showing.
@aralpic.twitter.com/RSM1jhNv09
-
If you look at the documentation for AuthorizationCopyRights(), it shows you can change the prompt and icon.
@aral https://developer.apple.com/library/mac/documentation/Security/Reference/authorization_ref/#//apple_ref/c/func/AuthorizationCopyRights … -
AuthorizationCopyRights() blocks all threads in the caller and then uses IPC (XPC) to call out to SecurityAgent to show the dialog.
@aral -
So that's: Show password dialog Open /Applications/Utilities/Activity Monitor Double-click Dropbox Click "Sample" Find thread…
@aral -
If you want to force the Authorization dialog to appear again: quit Dropbox, delete /Library/DropboxHelperTools/, relaunch Dropbox
@aral -
The thing to be worried about is that Dropbox now installs a kernel extension (kext)… https://developer.apple.com/library/mac/documentation/Darwin/Conceptual/KernelProgramming/Extend/Extend.html …
-
Hmm, Dropbox needs to update their uninstall instructions to include a note on how to uninstall their kext…https://www.dropbox.com/en/help/41
-
If you have it installed (not all do), the kext is at /Library/Extensions/Dropbox.kext
- 2 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.