Re: OS 10.2 & Mail scripting has introduced a new wrinkle
Re: OS 10.2 & Mail scripting has introduced a new wrinkle
- Subject: Re: OS 10.2 & Mail scripting has introduced a new wrinkle
- From: "John C. Welch" <email@hidden>
- Date: Fri, 16 Aug 2002 23:32:47 -0400
On 08/16/2002 19:58, "cricket" <email@hidden> wrote:
>
> Right...and since you *have* to log in to the system to use Mail
>
> *anyway*,
>
> this dialogue is really quite silly.
>
>
We're rightfully concerned that someone could send out an Applescript
>
application via email that, when run, will silently (no UI) send out
>
personal data without the user's knowledge that this is taking place.
How could it use Mail without Mail *starting*..."Hmm...I ran this app, and
Mail started...that's not right". Also, since there *is* a full copy of
Sendmail with Mac OS X, you don't *need* Mail to do that, you can use
Sendmail which *will* run without the user *ever* knowing it.
>
>
The reason I say rightfully is that PC users have been inundated with
>
viruses exactly like this for years, where an innocent looking .exe
>
file is actually gathered user data and sending it without the user
>
knowledge. I think you'd at least appreciate the attempt to keep the
>
user informed that an attachment they clicked on may actually do
>
something they don't want to have happen.
Totally different case, since thanks to VBA and OLE, you could send email
without a user interface or visible application instance. If Apple is *that*
worried, then you should reconsider this whole sendmail/unix/curl thing, you
can do a LOT more damage with that.
>
>
Clearly there's a better way to pull this off without interfering with
>
automation, but there is a reason for it to be there in the first place.
If it did any good, sure. But it's a false security measure that does no
good at all.
john
--
I don't mind being called tough, since I find in this racket it's the tough
guys who lead the survivors.
- Colonel Curtis LeMay
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.