Re: [PMH] Re: [Nautilus-list] Idea for Nautilus and GMC.



On 23 May 2001 13:03:20 +0300, Tuomas Kuosmanen wrote:
A problem comes to mind:

      There are several IRC clients that can do auto-dcc, and some    default
the dcc-save directory to your homedir. This is stupid. 
      And I am sure there are users who dont understand DCC and what
      it is once we get more novice users to GNOME. So DCC send a     .desktop
file and some nasty binary to the user, using some of         the funny icons
from /usr/share/pixmaps, and it is pretty likely
      people will click it. Or just send binaries as email.

Actually, what's to stop this right now?  Just send a .desktop and a
binary and have the shell string that the .desktop runs include a chmod.

For that matter, forget the binary.  Just send them a .desktop that does
rm -rf $HOME or have it download a binary using ftp or scp or some such
(based on the distro and architecture even) and run it.

Unles, do .desktop files have to be executable to be used?  If not,
perhaps this would make for a more secure system.  (I know that this
would break current setups.  I haven't thought of a solution to that.)

Thanks,
    Chris





[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]