Re: unwanted password dialog
Re: unwanted password dialog
- Subject: Re: unwanted password dialog
- From: Axel Luttgens <email@hidden>
- Date: Tue, 01 Nov 2011 11:12:27 +0100
Le 1 nov. 2011 à 00:36, Alex Zavatone a écrit :
> So, this means that if the user doesn't have an admin and password, this can't be turned on.
>
> If you're delivering something for the enterprise, then it's quite possible that they may not have admin rights on their box.
>
> Sounds like a "security enhancement" in Lion.
Hello Alex,
As I just wrote, this has nothing to do with Lion.
But yes, there are security implications when turning "access for assistive devices"" on, and it could be viewed wise not to enable it unless explicitely allowed by an admin.
A quick and dirty example of such implications:
Launch Safari and go to a web site requiring a "realm authentication"; when the authentication dialog appears, run this one in AppleScript Editor:
tell application "System Events"
tell application process "Safari"
tell front window
tell first sheet
tell text field 1
repeat
log (get value)
delay 1
end repeat
end tell
end tell
end tell
end tell
end tell
and look at the log while typing a user name.
This is just a poor man's key logger. But consider what could be done by making use of the accessibility APIs, outside of the rather restricted feature set made available thru System Events...
Axel
_______________________________________________
Do not post admin requests to the list. They will be ignored.
AppleScript-Users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
Archives: http://lists.apple.com/archives/applescript-users
This email sent to email@hidden