HideMyAss! privilege escalation flaws exposed

The researcher on the case says the VPN provider will not be fixing them.