Skip to main content
Search titles, bodies, and author names
Found 40,892 posts across 1 forum.

Widget auto-install = huge security hole? — #40

Quote: Originally Posted by wtmcgee To me, it doesn't seem like it's as big a deal as some are making it out to be. Yes it is, however, from what I have read, fixing it see…
MacNN Software by Pierre B.

Widget auto-install = huge security hole? — #41

Quote: Originally Posted by wtmcgee Just curious: Widgets are, on their most basic level, CSS/XHTML/Javascript. As long as the dashboard app only runs widgets that have that c…
MacNN Software by Mithras

Widget auto-install = huge security hole? — #43

Here's what else they could do, and it's far worse than either openURL or openApplication: Quote: Originally Posted by Apple Developer Documentation system Executes a command-…
MacNN Software by CharlesS

Widget auto-install = huge security hole? — #44

Quote: Originally Posted by CharlesS This is almost the exact same thing as on Windows IE when you browse to a site and it decides it will install some custom toolbar or other s…
MacNN Software by Person Man

Widget auto-install = huge security hole? — #45

Quote: Originally Posted by Person Man Well, not exactly. It's not a "bitch to get rid of" a widget... It is if you're a novice user and don't know about ~/Library/Widgets. …
MacNN Software by CharlesS

Widget auto-install = huge security hole? — #46

Quote: Originally Posted by CharlesS Here's what else they could do, and it's far worse than either openURL or openApplication: So all a widget needs to do is widget.system("r…
MacNN Software by misc

Widget auto-install = huge security hole? — #47

Quote: Originally Posted by misc Doesn't running system commands require the "Are you sure?" agreed to? And what stops the widget from not displaying this and/or automatically a…
MacNN Software by CharlesS

Widget auto-install = huge security hole? — #48

Quote: Originally Posted by CharlesS 1. It's already been shown that a site can make a widget look just like one of the default Apple ones. 2. If a user isn't intimately famili…
MacNN Software by misc

Widget auto-install = huge security hole? — #49

Quote: Originally Posted by misc Right, I understand that. But by doing a 'rm -fr' command from within a widget, Dashboard will raise the red flag and say "You sure?" Right? …
MacNN Software by Mithras

Widget auto-install = huge security hole? — #50

Nope! Your " Calculator" widget did not ask me for any kind of confirmation at all. It just ran, said its nasty little message, and displayed "EVIL" on the screen. From the looks …
MacNN Software by CharlesS

SQLite, Core Data, Accounting program — #2

The number of records and whether you wanted to have network abilities would be the deciding factors in making the SQLite/PostgreSQL decision. The latter is going to be for network…
MacNN Development by larkost

SQLite, Core Data, Accounting program — #3

I almost hate to respond, because I'm just starting to tinker with Core Data, but... I'm developing an app that is quite involved, and is probably as complex as an accounting pack…
MacNN Development by techtrucker

SQLite, Core Data, Accounting program — #4

Very nice...I especially like two separate point you both made. First, I forgot to mention that this will be a network-able accounting package and to learn that SQLite is not, that…
MacNN Development by utilizer

SQLite, Core Data, Accounting program — #5

Another option might be write an abstraction layer that would allow you to plugin Postgres or CoreData. That way you could test both and also give the user the option to not requir…
MacNN Development by WJMoore

SQLite, Core Data, Accounting program — #6

WJMoore makes a good point, I just wouldn't even know where to begin...use CoreData but with PostgreSQL...hmm. I don't know enough about CoreData yet. What I have done was to creat…
MacNN Development by techtrucker

SQLite, Core Data, Accounting program — #7

You can't pass SQL to CoreData. You must pass CoreData's own predicate formulated queries. CoreData then converts these to SQL internally (if using SQLite) or to another suitable…
MacNN Development by Brass
mp.ls