Re: unwanted password dialog
Re: unwanted password dialog
- Subject: Re: unwanted password dialog
- From: Alex Zavatone <email@hidden>
- Date: Tue, 01 Nov 2011 05:16:23 -0500
I'll test tomorrow when I'm awake. Cheers.
On Nov 1, 2011, at 5:12 AM, Axel Luttgens wrote:
> Le 1 nov. 2011 à 00:36, Alex Zavatone a écrit :
>
>> So, this means that if the user doesn't have an admin and password, this can't be turned on.
>>
>> If you're delivering something for the enterprise, then it's quite possible that they may not have admin rights on their box.
>>
>> Sounds like a "security enhancement" in Lion.
>
> Hello Alex,
>
> As I just wrote, this has nothing to do with Lion.
>
> But yes, there are security implications when turning "access for assistive devices"" on, and it could be viewed wise not to enable it unless explicitely allowed by an admin.
>
> A quick and dirty example of such implications:
> Launch Safari and go to a web site requiring a "realm authentication"; when the authentication dialog appears, run this one in AppleScript Editor:
>
> tell application "System Events"
> tell application process "Safari"
> tell front window
> tell first sheet
> tell text field 1
> repeat
> log (get value)
> delay 1
> end repeat
> end tell
> end tell
> end tell
> end tell
> end tell
>
> and look at the log while typing a user name.
>
> This is just a poor man's key logger. But consider what could be done by making use of the accessibility APIs, outside of the rather restricted feature set made available thru System Events...
>
> Axel
_______________________________________________
Do not post admin requests to the list. They will be ignored.
AppleScript-Users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
Archives: http://lists.apple.com/archives/applescript-users
This email sent to email@hidden