Re: AppleScript & HTML Again...
Re: AppleScript & HTML Again...
- Subject: Re: AppleScript & HTML Again...
- From: "John C. Welch" <email@hidden>
- Date: Thu, 25 Mar 2004 23:42:27 -0600
On 3/25/04 10:09 PM, "Gary (Lists)" <email@hidden> wrote:
>
> Actually, it's not. The release notes don't say a word about what, if any
>
> considerations were given to security. For a network application, that's
>
> critical. There's no way to set any sort of prefs to lock down access, or
>
> require any sort of authentication.
>
>
1. The announcement specifically stated ML's "scope" -- not network.
That's intent, not a safeguard. Ask MS about this.
>
2. It's not a "network application".
It allows me to invoke executables via HTML links from a web page. That's a
network application.
>
3. If your chair is left empty, your computer on, and someone sits down and
>
starts clicking away, this is not the fault of any software.
Strawman...this isn't about physical security.
>
>
John, respectively, you do not know what you are talking about regarding
>
Missing Link.
I can only know what the application tells me
>
>
Why all the nonsense argumentation?
Because I haven't seen anything beyond volume rebutting my concerns.
>
>
Let's just leave it at your earlier statement that you downloaded it,
>
couldn't read the code, and ditched it. So: You never used it.
No....I fired it up. Read the docs. Played with the examples. Did a port
scan. (that at least turned out well.) I used it for a bit. I'm sure as heck
not letting it on any machine I'm responsible for, even though the idea is
quite neat.
But I have yet to see where this isn't subvertable and how, other than
obscurity and obfuscation, you can prevent this from happening.
john
--
If someone passes out on the couch and you want to put them in a figure-four
leglock, ensure that the hold is correctly applied before they wake and fuck
your goddamn knee all up.
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.