Re: AppleScript & HTML Again...
Re: AppleScript & HTML Again...
- Subject: Re: AppleScript & HTML Again...
- From: "John W. Baxter" <email@hidden>
- Date: Fri, 26 Mar 2004 10:29:51 -0800
On 3/25/2004 21:42, "John C. Welch" <email@hidden> wrote:
>
On 3/25/04 10:09 PM, "Gary (Lists)" <email@hidden> wrote:
>
>
>> Actually, it's not. The release notes don't say a word about what, if any
>
>> considerations were given to security. For a network application, that's
>
>> critical. There's no way to set any sort of prefs to lock down access, or
>
>> require any sort of authentication.
>
>
>
> 1. The announcement specifically stated ML's "scope" -- not network.
>
>
That's intent, not a safeguard. Ask MS about this.
>
>
> 2. It's not a "network application".
>
>
It allows me to invoke executables via HTML links from a web page. That's a
>
network application.
>
>
> 3. If your chair is left empty, your computer on, and someone sits down and
>
> starts clicking away, this is not the fault of any software.
>
>
Strawman...this isn't about physical security.
>
>
>
>
> John, respectively, you do not know what you are talking about regarding
>
> Missing Link.
>
>
I can only know what the application tells me
>
>
>
>
> Why all the nonsense argumentation?
>
>
Because I haven't seen anything beyond volume rebutting my concerns.
>
>
>
>
> Let's just leave it at your earlier statement that you downloaded it,
>
> couldn't read the code, and ditched it. So: You never used it.
>
>
No....I fired it up. Read the docs. Played with the examples. Did a port
>
scan. (that at least turned out well.) I used it for a bit. I'm sure as heck
>
not letting it on any machine I'm responsible for, even though the idea is
>
quite neat.
>
>
But I have yet to see where this isn't subvertable and how, other than
>
obscurity and obfuscation, you can prevent this from happening.
>
>
john
I'm not planning to put Missing Link on the machine I'm working from at this
moment. The machine has too much access into other machines elsewhere...I
can't take the chance. I earn my living from the machine.
If I had a sandbox machine, I could put Missing Link there (a proper sandbox
would have no access to this machine). But I don't.
--John
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.