interesting minor security hole: turning off Remote Apple Events doesn't
interesting minor security hole: turning off Remote Apple Events doesn't
- Subject: interesting minor security hole: turning off Remote Apple Events doesn't
- From: Matt Neuburg <email@hidden>
- Date: Fri, 02 Sep 2005 07:32:21 -0700
Turn on Remote Apple Events on a target machine. On a local machine, connect
with a script like this:
tell application "Finder" of machine "eppc://whatever.local"
get name of window 1
end tell
Now turn off Remote Apple Events on the target machine. Return to the local
machine, where Script Editor is still sitting there open. Change the script
and run it again:
tell application "Finder" of machine "eppc://whatever.local"
get name of window 2
end tell
It works!!!! So even though Remote Apple Events has been turned off at the
server end, this evidently merely prevents *new* connections from being
established; existing connections still work. Thus it would be possible to
leave this connection open accidentally, believing that Remote Apple Events
is off on the target machine (because it says, in the Sharing pref pane,
that it *is* off). m.
--
matt neuburg, phd = email@hidden, http://www.tidbits.com/matt/
pantes anthropoi tou eidenai oregontai phusei
AppleScript: the Definitive Guide -
http://www.amazon.com/exec/obidos/ASIN/0596005571/somethingsbymatt
Take Control of Word 2004, Tiger, and more -
http://www.takecontrolbooks.com/tiger-customizing.html
Subscribe to TidBITS! It's free and smart. http://www.tidbits.com/
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Applescript-users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden