Got to love the classics like "it's not a chromium webapp so it's useless", and "it's not a 6502 hello world made by training butterflies to pull strings and achieve bit flips so it's not cool".
That's a quote / follow up from the previous Twitter thread about how their driver does fucked things.
Absolutely a security vulnerability, and while I havent reproduced on my own and am just going off what I read on the original Twitter thread (so it's possible I could be regurgitating bad info), my understanding is that it gives processes this access by listening to process creation and hashing the name. Meaning if I have a known hash from the list I can simply rename my program / malware and bam.
I had, and still have, a 2014 MacBook pro. I bought it used in 2015/16 but still paid near a grand so I babied it. Pushed it as a dev machine but took good physical care of it.
Eventually same or similar issue where it just wouldn't boot. I took it to Apple and they said they had to send it off somewhere else but they suspected gpu failure, they noticed some screen tearing and said they could do that for me no problem and warrantied it.
Got a call later that my MacBook had passed the gpu tests and they had to do more to figure out what was up. Another call and they said my MacBook had water damage and they wouldn't touch it. I called bs because they wouldn't have warrantied the screen if it had water damage, and also I babied the hell out of the thing. The person I was talking to said she was going to get to the bottom of it and would call back.
They replaced every component in the damn laptop, but only after it broke and they tried to take no fault. I'm never going to stop complaining about this experience but at least I still have this laptop for now
In the case of my company's software it's for ease of deployment for new versions. When you click download you get a gui that will step you settings etc. I don't want to rebuild and re-sign the gui every time I have a patch and need to change its install behavior slightly, so it downloads the latest installer dll and executes that in order to handle any new flags, configs, added binaries, etc.
All of this is done behind the scenes though, so your average end user doesn't even notice.
Absolute hacker news moment.