Re: Using Zip executable in Cocoa Application
Re: Using Zip executable in Cocoa Application
- Subject: Re: Using Zip executable in Cocoa Application
- From: Ondra Cada <email@hidden>
- Date: Sat, 17 Dec 2005 18:10:49 +0100
Uli,
On 17.12.2005, at 17:22, Uli Kusterer wrote:
That won't return @"/tmp"; it's something like @"/private/var/tmp/
folders.501/TemporaryItems", but more-or-less guaranteed to be
world-writable (on a writable file system).
Nice security hole waiting to be explored. Zip some important
files of the user's and save them there, and any other user can
read them... Sweeeet...
Who says he stores the zips there world-readable? Haven't noticed
that :)
---
Ondra Čada
OCSoftware: email@hidden
http://www.ocs.cz
private email@hidden
http://www.ocs.cz/oc
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden