That seems like an accident waiting to happen. I guess they are taking the model that you installed the 'app' on your computer, so you must be willing to let it do what normal apps do.
What's doubly sketchy is that if you download an app from the web, when you first try to run it, OS X at least warns you that you downloaded this thing and are you sure you want to run it. There is no such warning for a widget... On 2010-09-29, at 23:42, Henry Minsky wrote: > I didn't get any warning except from Little Snitch asking if it was OK to > open a connection ... > > On Wed, Sep 29, 2010 at 9:12 PM, P T Withington <[email protected]>wrote: > >> Interesting. Do you get any warning about this, or is it totally up to the >> widget to decide its permissions? >> >> On 2010-09-29, at 19:18, Henry Minsky wrote: >> >>> Hey, there is an option in a Dashboard widget's config file to allow >> network >>> access, and to allow access to the >>> local filesystem. >>> >>> I added a default to the osx template so that network access is allowed. >>> This allows the Amazon app >>> to run as a Dashboard widget and it can access XML data from Amazon >>> directly, without needing >>> a proxy server. yay. >>
