On 23 May 2001 13:03:20 +0300, Tuomas Kuosmanen wrote:
> A problem comes to mind:
> 
>       There are several IRC clients that can do auto-dcc, and some    default
> the dcc-save directory to your homedir. This is stupid. 
>       And I am sure there are users who dont understand DCC and what
>       it is once we get more novice users to GNOME. So DCC send a     .desktop
> file and some nasty binary to the user, using some of         the funny icons
> from /usr/share/pixmaps, and it is pretty likely
>       people will click it. Or just send binaries as email.

Actually, what's to stop this right now?  Just send a .desktop and a
binary and have the shell string that the .desktop runs include a chmod.

For that matter, forget the binary.  Just send them a .desktop that does
rm -rf $HOME or have it download a binary using ftp or scp or some such
(based on the distro and architecture even) and run it.

Unles, do .desktop files have to be executable to be used?  If not,
perhaps this would make for a more secure system.  (I know that this
would break current setups.  I haven't thought of a solution to that.)

Thanks,
    Chris


_______________________________________________
Mc mailing list
[EMAIL PROTECTED]
http://mail.gnome.org/mailman/listinfo/mc

Reply via email to