Re: OS X 10.8 Security & Applescripts - "unidentified developer"
Re: OS X 10.8 Security & Applescripts - "unidentified developer"
- Subject: Re: OS X 10.8 Security & Applescripts - "unidentified developer"
- From: "John C. Welch" <email@hidden>
- Date: Mon, 20 Aug 2012 15:09:56 -0400
- Thread-topic: OS X 10.8 Security & Applescripts - "unidentified developer"
On 8/13/12 7:40 PM, "Alex Zavatone" <email@hidden> wrote:
>
>On Aug 13, 2012, at 6:59 PM, Shane Stanley wrote:
>
>>On 14/08/2012, at 6:41 AM, "Houston, Brad" <email@hidden> wrote:
>>>Stepping back a moment from dealing with the problems associated with
>>>compliance with this new demand, can anyone tell me how this is a
>>>benefit to the world of scripting.
>>It's not designed particularly for the "world of scripting". It's simply
>>a way that a user can, if they wish, check that an application came from
>>a potentially traceable source, and hasn't been tampered with by someone
>>else in transit. In the case of non-script apps, code-signing itself has
>>also been the basis of certain user conveniences when upgrading apps for
>>several years.
>>>If we don¹t trust a script, and/or can¹t evaluate what it will actually
>>>do, DON¹T RUN IT.
>>So how exactly do you evaluate what a script will do without running it?
>
>If you don't have access to the source, you can't.
I can get the source code to all kinds of things. It doesn¹t mean:
1) I have the knowledge of the language to read it correctly
2) I'm familiar enough with the specific implementation to evaluate what
I'm reading correctly
3) I know enough about all the possible interactions (short of running it
through a debugger for days at a time) to know what I'm evaluating is
actually doing.
"the source is available" is one of the best dismissals ever. but that's
all it is. Every time I read that, I actually see "I've no time to explain
anything to anyone not as smart as I".
--
³The Americans have need of the telephone, but we do not. We have plenty
of messenger boys.² Sir William Preece, Chief Engineer, British Post
Office, 1878.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
AppleScript-Users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
Archives: http://lists.apple.com/archives/applescript-users
This email sent to email@hidden