How Dropbox Hacks Your Mac

I have given Dropbox access to my files, admins rights, and ability to run in the kernel. I'm not freaking out about the Accessibility API.

setuid binaries:

  $ tree -p /Library/DropboxHelperTools/
  /Library/DropboxHelperTools/
  ├── [-r-s--x--x]  DropboxHelperInstaller
  └── [drwxr-xr-x]  Dropbox_u501
      ├── [-r-s--x--x]  dbaccessperm
      ├── [-r-s--x--x]  dbfseventsd
      └── [-r-s--x--x]  dbkextd

kernel extension:

  $ kextstat -b com.getdropbox.dropbox.kext
  Index Refs Address            Size       Wired      Name (Version) UUID <Linked Against>
    163    0 0xffffff7f835b5000 0x6000     0x6000     com.getdropbox.dropbox.kext (1.7.5)