Re:How Dropbox Hacks Your Mac
by lm2s on Friday September 09, 2016 @01:08PM
(#12464120)
You're assuming everyone trusts Dropbox with all their files and that everyone installs their kernel extension, which is a wrong assumption.
[ Parent
| on HN ]
Re:How Dropbox Hacks Your Mac
by Dylan16807 on Friday September 09, 2016 @01:16PM
(#12464197)
If we're worried about theoretical abuse, the client could access all of your files because it runs as you.
You can opt out of the kernel extension? Still, you give it root to install, and it has a long history of hacking the file browser to get icon overlays... it seems weird to me that this would be a deciding factor.
I was under the impression that the kernel extension was a separate product, it's being included in the standalone Dropbox application?
You do have a point about giving it administrator privileges, the post however shows very clearly that they are abusing your trust which is enough for people to think twice before using their application..
What kernel extension? Dropbox has a Finder plugin for badges, but what would they need a kernel extension for?
This kernel extension:
/Library/Extensions/Dropbox.kext
And good question.
I don't see that on my Mac, probably a different client version. I guess it's related to Project Infinite:
https://blogs.dropbox.com/tech/2016/05/going-deeper-with-pro...