Re: Launch Services info (was "Re: Auto-Remove .DS_Store Files?")
Re: Launch Services info (was "Re: Auto-Remove .DS_Store Files?")
- Subject: Re: Launch Services info (was "Re: Auto-Remove .DS_Store Files?")
- From: Laine Lee <email@hidden>
- Date: Tue, 01 Aug 2006 10:03:54 -0500
- Thread-topic: Launch Services info (was "Re: Auto-Remove .DS_Store Files?")
On 7/31/06 11:24 PM, "Matt Deatherage" <email@hidden> wrote:
> (I'm not saying I *like* it, but if there's any way to bypass it, there's
> no reason for it to be there at all.)
I believe that there is only one case in which the dialog is likely to be
effective, and that's the case in which the user doesn't recognize the name
of the application included in the dialog. If a security vulnerability
exists which allows an installed and/or familiar application to be replaced
by a sinister imposter, I don't see how such a dialog can offer any added
protection. The only way to benefit from the dialog is for the user to
verify the validity of the application named in the dialog before allowing
the specified application to be launched. Checking the validity for an
application when provided with only the information that
(1) a potential security issue exists and
(2) the name of the application associated with the potential security issue
presents a significant challenge for a user, I believe.
Have you ever stopped to verify an application's validity if you see a
recognized application's name in the dialog box? If you have, then my hat is
off to you and in your case the dialog has provided the full benefit for
which it was intended. If you're like me, and you never think twice about
dismissing the dialog and launching the specified application if you
recognize its name in the dialog, then what greater risk is afforded by
implementing a list of applications whose launching is predetermined to
never trigger the dialog?
--
Laine Lee
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Applescript-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden