Re: Preview in Internet Explorer
Re: Preview in Internet Explorer
- Subject: Re: Preview in Internet Explorer
- From: Matt Judy <email@hidden>
- Date: Mon, 08 Jul 2002 20:57:26 -0700
True, /Users may be a shared location, but so is /, for that matter.
There is a BIG difference between a shared dumping ground for transitory
data, and the relative sanctity of ones home directory.
~/Library/Caches/SomeApp may not ultimately be any more secure than a
folder, 'chmod 700'ed, in /tmp. But it's initialy invisible to other
users, offering no target to hack. On the flip side of that token, it
*is* readily visible to the user who should see it, unlike /tmp, which
is hidden in the Finder.
I mean, now that UNIX isn't just for geeks anymore, we many need to
rethink our conventions a bit. /tmp is no longer ALWAYS the correct
choice. And in this *particular* case, for this *particular* GUI app,
it is certainly not.
--Matt Judy
Ondra Cada wrote:
On Monday, July 8, 2002, at 10:33 , Matt Judy wrote:
That's just kinda silly. There'd still be something there to arouse
curiousity, regardless of its readability. OS X is a multi-user OS.
Putting an individual user's sensitive project files in a shared
location just seems philosophically questionable.
The same nonsense argument you can use for ~/Library/Caches/YourApp,
since ~ lays inside a shared location (generally /Users) ;)))
Well, don't take me wrong -- there are perfectly reasonable cases when
NOT to use /tmp. But for temporary files it is *designed*, of course in
a multi-user environment (that's incidentally also why it has the sticky
bit set). Therefore, vast majority of tempfiles should go there; if
security is concern, into appropriate subfolder.
---
Ondra Cada
OCSoftware: email@hidden http://www.ocs.cz
private email@hidden http://www.ocs.cz/oc
_______________________________________________
cocoa-dev mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/cocoa-dev
Do not post admin requests to the list. They will be ignored.