Re: Launch Services info (was "Re: Auto-Remove .DS_Store Files?")
Re: Launch Services info (was "Re: Auto-Remove .DS_Store Files?")
- Subject: Re: Launch Services info (was "Re: Auto-Remove .DS_Store Files?")
- From: Matt Deatherage <email@hidden>
- Date: Tue, 1 Aug 2006 11:58:00 -0500
On 8/1/06 at 11:49 AM, Laine Lee <email@hidden> wrote:
> The first time launch alert routine is almost entirely inadequate for
> protection against this vulnerability.
Whether it is 100% effective at killing germs or not, its entire purpose
is to provide some protection against new apps launching without you
knowing it. If you can defeat that, it has *no* purpose whatsoever.
I understand your argument that it might as well be removed because it's
not effective *enough*, but that does not change the fact that if it
could be bypassed at all, it would not be effective *at all*. Therefore,
no "switch" is documented. If anyone finds one and documents it, I'm
pretty sure Apple will break that in the next security update because it
reopens some of the holes that the thing was intended to fix.
It's much like asking if you can find a way to open the keychain without
the user's password. It doesn't matter if you think keychain is secure
enough - if you could bypass the password requirement, it wouldn't be
secure *at all*, so there's no way to do that.
--Matt
--
Matt Deatherage <email@hidden>
GCSF, Incorporated <http://www.macjournals.com>
"Hmm, Florida. Just think - somewhere in this state, right now, Jeb Bush
is eating a live puppy!" -- Stewie Griffin
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Applescript-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden