Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Tech and Talk » OS and Software » All Things Macintosh » Widget Security
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
[X] Freeware DVD audio extractor / ripper for OS X? »
« Networking  

jDyno
Premium
join:2001-02-20
Washington, DC
clubs:

Re: Widget Security

But it doesn't really tell you that it may be a security risk or that it accesses private system stuff. It just asks permission to run for the first time.

Also, no such warning exists when a widget needs Net access.

Yes, apps exist to monitor net traffic, and of course one is SUPPOSED to scan everything you put on your computer, but that's just not a practical security paradigm.

Even if everyone did have the discipline to check for security risks in every Widget (or any other thing they put on their machine), you can't expect everyone to have the knowledge to know what to look for. Hell, I'm a developer and I wouldn't be able to spot everything - probably even if I knew it was there.

And no, these do no more than any other Applescript could do, but Widgets and Automator actions will be used and downloaded many hundreds of thousand of more times than Applescript just by the very fact in how they are now more built-in adn accessible by the everyday user.

I am of the opinion that the security of Dashboard Widgets (and Automator actions) needs to be addressed by Apple ASAP.
--
Smart Marketing

shavano
Even in America -- I long for America

join:2003-06-08
Dallas, TX

Re: Widget Security

said by jDyno See Profile:

But it doesn't really tell you that it may be a security risk

that's just not a practical security paradigm.

Even if everyone did have the discipline ... you can't expect everyone to have the knowledge to know what to look for.

I am of the opinion that the security of Dashboard Widgets (and Automator actions) needs to be addressed by Apple ASAP.
Exactly!

I just took a few minutes this morning to see what it might take for me to write my own. I saw the note on the Apple page about system commands and looked inside a couple of widgets.

My immediate reaction was "holy sh*t!!!!!".

Though not a professional developer, I'm reasonably competent at the Unix command line and have done some HTML and C programs. And I immediately knew they will easily be so complex there is no chance I would be able to tell if a widget was going to do something malicious.
--
Seek truth, not validation of existing beliefs.
Forums » Tech and Talk » OS and Software » All Things Macintosh[X] Freeware DVD audio extractor / ripper for OS X? »
« Networking  


Thursday, 26-Nov 09:14:35 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [105] New AT&T Ad Campaign Hits Back At Verizon
· [104] Time Warner Cable Fires Broadside At Broadcasters
· [95] Apple Joins AT&T Verizon Snark Fest
· [85] New Bill Takes Aim At Higher Verizon ETFs
· [68] TiVo Sees Record Customer Losses
· [49] In-Flight Internet Headed For Bumpy Landing?
· [34] Senators Want ACTA Made Public
· [32] Despite Billions In USF Fees, U.S. Libraries Lack Bandwidth
· [31] ICANN Slams DNS Redirection
· [30] Earthlink Suffers From Major E-mail Outage
Most people now reading
· Whats the big deal about being "Old School"....? [World of Warcraft]
· Windows 7 boot manager editing questions [Microsoft Help]
· I'll Just Unplug That... [No, I Will Not Fix Your #@$!! Computer]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· [Config] cisco asa 5505 with multiple outside IP addresses [Cisco]
· pfSense vs IPCop vs Zeroshell vs Monowall vs Tomato [TekSavvy]
· HOW-TO: QoS and Tomato (fixes "choppy voice") [MagicJack]
· A little freaky, not sure if its legit. [Spam, Scam and Phishbusters]
· Fiber to the Premises [Comcast HSI]