MacTrove
Home▸ Forums▸ MacNN▸ Another developer ripoff by Apple: Dashboard — #49
Post #49 by Jan Van Boghout
Source ForumMacNN
CategoryTroubleshooting
Post DateWed, 30 Jun 2004 - 06:34
Original URLhttps://web.archive.org/web/20050523071602/https://forums.macnn.com/showthread.php?t=218479
Post
Quote:
Originally posted by Millennium:
Are they insane?!

If this is true, then God help us all. The extensions WebCore would need to support an adequate widget API are nothing short of complete and utter lunacy from a security perspective. The possibilities for exploitation are enough to make me sick to my stomach. Note, for example, that in order to put together that demo page, they had to make AddressBook available through JavaScript. Can anyone else here see the possibilities for Safari-specific worms?

However, I will now concede that they did not in fact steal from Konfabulator. No need to, if you're going this route. But I can honestly say now that I wish Apple had; that would be far better than this insanity.
The widgets may be web pages, but that doesn't mean they're loaded automatically at all. You add a widget, you take the risk of it doing something nasty. Just like you do with a normal application. They won't automagically spread around your computer.

Edit: oh I think you meant that normal web pages would be able to access everything? I highly doubt that, that would be a very illogical (and stupid) thing to do.