<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">I think that this was more serious that you would imagine.<DIV><BR class="khtml-block-placeholder"></DIV><DIV>The trojan, as I recall, exploits what is basically a convention for the typical OSX install: the first account to register is given administrator privileges. The second defect as I recall is that Terminal will run some of these scripts as administrator even without a password. The lynchpin, as is always so common on Windows, is the browser: Safari would consider the downloaded file as an image file if it was named with .jpg or something on it, but was actually a terminal script, and would "open" it automatically in Terminal.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>The description of commands being sent across the screen is him describing Terminal as being launched and various UNIX commands being processed. </DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>This problem was detailed many weeks ago in such reputable websites as xlr8yourmac.com and macfixit.com. One of the remedies suggested was to create another account without administrator privileges, then use that one exclusively as the primary account.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>I think that the issue was Terminal-specific in some way, as I know that my administrator account is still required to manually enter passwords whenever I want to do something important, like OS updates, etc.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>My impression was that this was not a problem to be blown off.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Michael</DIV><DIV><BR><DIV><DIV>On May 1, 2006, at 7:49 AM, Aron Spencer wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Helvetica" size="3" style="font: 12.0px Helvetica">He shorted AAPL.</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"><BR></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Helvetica" size="3" style="font: 12.0px Helvetica">he had to type in his administrator password to get anything bad to happen...</FONT></P> </BLOCKQUOTE></DIV><BR></DIV></BODY></HTML>