Re:MacKeeper 0-day flaw more than 20M users affected
by aidos on Wednesday May 13, 2015 @09:16AM
(#9538617)
MacKeeper will execute arbitrary base64 encoded commands on a custom url as root.
I guess it's a "flaw" but whoever put that in knew that would come back to bite. Haha, it's so insanely irresponsible that I don't even know where to start.
We need something like a hippocratic oath, and probably a governing body (or however grown up industries manage themselves), to stop people responsible for this sort of code from having a license to practice.
I guess it's a "flaw" but whoever put that in knew that would come back to bite. Haha, it's so insanely irresponsible that I don't even know where to start.
We need something like a hippocratic oath, and probably a governing body (or however grown up industries manage themselves), to stop people responsible for this sort of code from having a license to practice.