iDon’tLike
Posted in 1 on Friday, January 4, 2008 by rasterbator
iLike™ is bypassing Mac OS X’s security by automatically installing iLike updates. First, iLike should include a preference (in iTunes or System Preferences) to check for updates automatically. Second, iLike should have a notification system that is an extension of the update checker. When iTunes and iLike are launched, a dialog box should alert the user that there is a newer version available for download, and it should ask the user to download the iLike installer. If the user chooses to download the iLike installer, an admin password should be required.
Currently, every OS X user is subjected to possible injection of virus, spyware, malware, etc. by iLike.
From your FAQ: “Spyware relates to software that becomes installed on computer without the informed consent or knowledge of the computer’s owner and covertly transmits or receives data to or from a remote host.” This is exactly what you are doing with the automatic updates of iLike. Even though user consents to original installation of software, they are not informed that iLike will install updates in admin mode… by itself… undetected.
Here is the code from console.app:
2008-01-04 00:20:01.182 iLikeAgent[392] iLikeAgent launched
2008-01-04 00:20:01.183 iLikeAgent[392] Agent checking for updates: http://www.ilike.com
2008-01-04 00:20:01.184 iLikeAgent[392] moving to trash: /Users/username/Library/Application Support/iLike/Downloads/Updates/100
2008-01-04 00:20:01.484 iLikeAgent[392] update result: ok
2008-01-04 00:20:01.484 iLikeAgent[392] version OK
2008-01-04 00:20:01.485 iLikeAgent[392] iLikeAgent terminated
iLike: please respond to this serious security issue.
Sincerely,
iLike Mac User Community
Here is my take on 





