A Deceitful 'Doctor' in the Mac App Store
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Objective-See's Patrick Wardle, building on findings from @privacyis1st, reports that Adware Doctor, a $4.99 Mac App Store utility, zips Safari, Chrome, Firefox and App Store history plus process and app lists into a password-protected archive and uploads it to adscan.yelabapp.com. The password, "webtool", is visible on the command line. The app uses a user-approved home-directory grant and Apple's own sample code to list processes inside the sandbox. The app was later removed. Most claims here rest on the author's own analysis; the store-ranking figures weren't verified.