On Nov 14, 2016, at 2:28 PM, Chip Scheide <[email protected]> wrote: > > ANd is this the next step in forcing all applications t use the "app > store" and the forced end of most "free form" programming? (4D > databases would fall into this category)
No, it is not. This measure is in response to published exploits: https://papers.put.as/papers/macosx/2015/vb201503-dylib-hijacking.pdf Note that the Gatekeeper Path Randomization which is being talked about here is also attempting to prevent “repackaging” exploits. http://lapcatsoftware.com/articles/zero-day.html The concept of having the default database inside the application package really needs to be abandoned. Also, 4D needs to alter the startup mechanism to allow developers to write code that runs before the datafile is opened. This would allow a developer to much more easily do “the right thing”, which is to put the database (you know, with data the user can change) in the Documents or Application Support directories. Alternatively, if the data is indeed fully static, then the embedded datafile could be opened in read-only mode. Jim Crate ********************************************************************** 4D Internet Users Group (4D iNUG) FAQ: http://lists.4d.com/faqnug.html Archive: http://lists.4d.com/archives.html Options: http://lists.4d.com/mailman/options/4d_tech Unsub: mailto:[email protected] **********************************************************************
