Possible eddie feature

[Keksjdjdke 35]

Ivpn's client has a feature that when you start up your Mac their network lock is it immediately enabled not requiring the user to perform any special action like sign in with there password. I think Eddie could use a feature like this where when you start up your Mac network Lock would immediately enable itself and Connect to VPN. I think their client uses a privileged helper that is constantly running in the background, and the privilege helper automatically starts up when your Mac starts up.

Here is the website of the client I was talking about. ivan.net

[zhang888 1066]

This is a huge security risk, I can write a malicious app that will use this helper in order to elevate my privileges to the root user and compromise the system.

There is a very good reason why Apple recommends against it, and this is the reason why Android device is more secure when not rooted.

Once you allow a "helper" to run unprivileged binaries and elevate them to root, the road to a compromised system is very short.

[Keksjdjdke 35]

This is a huge security risk, I can write a malicious app that will use this helper in order to elevate my privileges to the root user and compromise the system.

There is a very good reason why Apple recommends against it, and this is the reason why Android device is more secure when not rooted.

Once you allow a "helper" to run unprivileged binaries and elevate them to root, the road to a compromised system is very short.

If it is such a huge a Security risk, why does Ivan use it. And is there anyway to accomplish this without having a huge security risk?

Please delete this double post

[zhang888 1066]

Other providers don't care about your security since this is probably not their priority.

There is no way of keeping an elevated process in memory, which will automatically elevate untrusted user application,

without exposing security issues. This is why the entire *nix ecosystem has the permissions model and the sudo subsystem.

 

Basically what they did is a permanent "bypass" of Cocoasudo, for a reason that is unknown to me.

 

To your other question, when you enable Network Lock once, it will stay active - this is accomplished by PF (OSX Firewall)

and has nothing to do with any additional application. I do not know how it is implemented with your other provider.

[Keksjdjdke 35]

Thank you for this very helpful information.