Re: Admin programs and password
Re: Admin programs and password
- Subject: Re: Admin programs and password
- From: Brian Hill <email@hidden>
- Date: Tue, 7 Aug 2001 14:19:54 -0500
On Tuesday, August 7, 2001, at 01:45 PM, David Rehring wrote:
How could you tell [as an end-user] whether the application is
controlling
the dialog or if the app. has properly used some Apple framework to
control
the dialog [if it existed, as I don't know if it does or not]?
You can't. And it doesn't matter. Even if the app uses the Security
framework to acquire access, once it gets that access, all your data are
belong to it, if the application is malicious in intent. Once it gets
root access, a malicious app wouldn't need your password anymore.
The key is to not authorize untrusted apps with root privileges. The
question is: which apps to trust? -- that's a judgement call, same as on
any other operating system.
Brian
email@hidden
http://personalpages.tds.net/~brian_hill
___________________________________________________________
"Why? I came into this game for adventure - go anywhere, travel
light, get in, get out, wherever there's trouble, a man alone.
Now they've got the whole country sectioned off and you can't
move without a form. I'm the last of a breed."
-- Archibald "Harry" Tuttle, Rogue HVAC Repairman
___________________________________________________________