Hack Mac OS X With Installer Packages

Posted by ryuzaki0 on Saturday September 16, 2006 @06:37AM from the why-not-to-run-as-admin dept.

nezmar writes, "MacGeekery has a short but insightful piece with examples on how to use a malformed Installer package (.pkg) on Mac OS X to 'insert user accounts with administrator rights and change root-owned system configuration or binary files without prompting the vast majority of Mac OS X users for a password of any kind.'" The article notes that this issue was brought up on the Apple Discussion Boards 6 weeks back and that it was noted there as a duplicate / known issue. It also gives as an example the installation of Parallels, the popular virtualization software, which uses the described technique, but not for nefarious purposes.

2 of 194 comments (clear)

Min score:

Reason:

Sort:

Re:Well... by Anonymous Coward · 2006-09-16 08:30 · Score: 3, Funny

A reputable company would not risk the lawsuits with distributing known hacked packages.
What about the Sony roo... nevermind, missed the "reputable" part.
Whew! by cciRRus · 2006-09-16 14:53 · Score: 4, Funny

Good thing I'm using Windows.

--
w00t