For newbies, like me, what kind of possible malware widgets could be
downloaded in 10.3.9? I thought what was being pointed out was a
risk in using dashboard, which is a 10.4 thing. I understand the
"Open safe files" vulnerability now and will turn it off as soon as I
get home, but I didn't think much of it because none of the "safe" file
types seemed like possible vulnerabilities. So what kind of files
can be auto-opened by Safari in 10.3.9 that can sneak malware into OS X?<br>
<br>
Thanks,<br>
matt.<br><br><div><span class="gmail_quote">On 5/9/05, <b class="gmail_sendername">Stephen Mackenzie</b> <<a href="mailto:stephen.mackenzie@connectfree.co.uk">stephen.mackenzie@connectfree.co.uk</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>On May 9, 2005, at 17:21, Hector Luna wrote:<br><br>>> Wouldn't just unchecking the "Open safe files" box in Safari also do<br>>> this?<br>><br>> Yes. If you're a computer admin you could take it a bit further and
<br>> make ~/Library/Widgets read-only as well...<br><br>Still automatically downloads the widget (even in 10.3.9) cos of a http<br>refresh header. Another page (full of "evil" widgets) does it with<br>iframes.
<br><br>People are (rightly) getting excited about widgets executing arbitrary<br>code, but I'd be quite happy for Safari NOT to download random things<br>like zip files without telling me!<br><br>SM.<br><br>(Never approved of that newfangled Dashboard thing anyways...)
<br><br>_______________________________________________<br>X4U mailing list<br><a href="mailto:X4U@listserver.themacintoshguy.com">X4U@listserver.themacintoshguy.com</a><br><a href="http://listserver.themacintoshguy.com/mailman/listinfo/x4u">
http://listserver.themacintoshguy.com/mailman/listinfo/x4u</a><br><br>Listmom is trying to clean out his closets! Vintage Mac and random stuff:<br> <a href="http://search.ebay.com/_W0QQsassZmacguy1984">http://search.ebay.com/_W0QQsassZmacguy1984
</a><br></blockquote></div><br>