Dropbox Modifies TCC.db to Give Itself Accessibility Access

Phil Stokes:

If you have Dropbox installed, take a look at System Preferences > Security & Privacy > Accessibility tab. Notice something? Ever wondered how it got in there? Do you think you might have put that in there yourself after Dropbox asked you for permission to control the computer?

No, I can assure you that your memory isn’t faulty. You don’t remember doing that because Dropbox never presented this dialog to you, as it should have[…]

[…]

Indeed, even with your admin password, it still shouldn’t be able to get into Accessibility. Clearly Dropbox’s coders have been doing some OS X hacking on company time.

(-‸ლ)1

  1. I really have nothing to say other than give Dropbox a huge facepalm over this entire thing. Modifying sensitive areas without permission? Seriously Dropbox? I expected better of you. 

Source: http://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little-security-hack/

Roger Stringer spends most of his time solving problems for people, and otherwise occupying himself with being a dad, cooking, speaking, learning, writing, reading, and the overall pursuit of life. He lives in Penticton, British Columbia, Canada

You can follow the latest RogerStringer.com posts from TwitterRSS feed, or the JSON feed.

Feel free to Follow @freekrai on Twitter if you’d like.

© 2004 - 2018 - Roger Stringer (1059105 B.C. LTD) | All rights reserved