3 ms·
So you're saying that a malicious iTunes visualizer plugin won't get installed and get past antivirus? Or maybe that your visualizer/screensaver plugins should
by lstamour 13y ago
So you're saying that a malicious iTunes visualizer plugin won't get installed and get past antivirus?
Or maybe that your visualizer/screensaver plugins should have access to your credit cards?
Worries the crap out of me, personally. :)
- nknighthb 13y agoI'm saying once you download and run arbitrary native code, all bets are off. Hell, I just kind of assume any such code has full root access no matter what user it's started as, given the commonality of privilege escalation vulnerabilities.
- _fG_ 13y agoI was really tempted to ignore all your bullshit but can't resist. Honestly you have no fucking idea what you are talking about. Arbitrary code is any application that you download and run in your computer. You don't download applications? Cool, your browser is also a great target. Any application can easy pack an evil plugin and unpack and own your iTunes data. Easy as that. Want better? If you use Carbon Copy Cloner any other application can own you the moment you start your backup. Sandbox and AppStore? LOL Go read that Evil ROP paper into the Appstore. Conclusion: comment when you know wtf you talk about. Bye