Re: Application Security...
Re: Application Security...
- Subject: Re: Application Security...
- From: "Sven A. Schmidt" <email@hidden>
- Date: Wed, 19 Feb 2003 13:10:36 +0100
B. it is really talking to another "secure" object (System internal or
application internal)
Objects are not secure. Logins are secure. The objects in the
applications you use can't do anything that you don't have
authorization to do.
I've been recently asking myself the same question as Adam (see the
'patching' thread).
A very concrete concern is this: Can one write an Input Manager that
spies on a password text field and then saves (or even mails) what it
sees? I haven't found the time to try this, yet. AFAIK writing an Input
Manager is not very difficult (probably like Services).
Sven
_______________________________________________
cocoa-dev mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/cocoa-dev
Do not post admin requests to the list. They will be ignored.