ElvUi *HAD* a developer written backdoor

[Skullknight]

The backdoor has been removed in the latest release, but read this thread on reddit (http://www.reddit.com/r/wow/comments/2j ... remove_it/) and you can decide for yourself if you feel that you want to continue to trust the developer.

My personal opinion (as someone who writes software) is that it was monumentally stupid for the developer to have put this "debugging tool" in a release version of the addon. If you want to do on-the-fly debugging and troubleshooting you compile debug/test versions of the software and then inform the testers of exactly what they are subjecting themselves before installation.

[Druitt]

am i the only one that things that whole forum is overreacting to the situation? i use ElvUi, and will continue to do so, i didnt know about the backdoor, but honestly, even if they were to have left it in, i just wouldnt have cared. you take some risk with any addon you download, even curse itself has given people viruses, i havent had any issue with ElvUi and i dont think i will.

[KillerPotato]

The thing people have to keep in mind is that while yes, its annoying / shouldnt happen / unethical.. bla bla bla.
Even with the backdoor, what is he going to get, your account info ? big effing deal at this point of time everyone have an authenticator attached to their account, so he can do zip with your info.

Plus, most players use the launcher right now, so you hardly ever put your password into wow directly.

Only possible way for him to do anything with the backdoor (assuming it allows him to collect your account info) is IF you actually type the password into WoW, AND IF you don't have an authenticator, AND IF your WoW password and email password are the same.

And if the last 2 apply to you - you deserve to be hacked for being an idiot.

[Gaarashatan]

OR if you use dumb elvui