To clarify, disabling auto-mount on download makes it hard for someone to give you a disk image that contains, say, an Applescript that contains "rm -rf $HOME". However, clever coders can just guess at a nice script that you might already have in standard places. Allowing URLs to run arbitrary apps is probably not a good idea.
So, I thought I'd mention "More Internet" as well, as you can use this custom pref panel to change the help:// protocol to something besides the Help application, if you are really paranoid about this.
Personally, I'm just going to review my various Applescripts to see if any of 'em are all that dangerous.
Yup. It's a bug. A nasty one. Welcome to Windows-strength exploits, y'all.
Existing users, log in. New users, create a free account. Lost password?
Tweaking a preference helps? - clvrmnky
To clarify, disabling auto-mount on download makes it hard for someone to give you a disk image that contains, say, an Applescript that contains "rm -rf $HOME". However, clever coders can just guess at a nice script that you might already have in standard places. Allowing URLs to run arbitrary apps is probably not a good idea.So, I thought I'd mention "More Internet" as well, as you can use this custom pref panel to change the help:// protocol to something besides the Help application, if you are really paranoid about this.
Personally, I'm just going to review my various Applescripts to see if any of 'em are all that dangerous.
Yup. It's a bug. A nasty one. Welcome to Windows-strength exploits, y'all.
Reply to This
Tuesday, May 18 2004 @ 08:29 PM PDT