-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 At 12:17 AM -0400 10/17/01, Kee Hinckley wrote: >Hmm. A little experimenting shows that this is also true of >everything in the Services menu. Do a find in netinfo. Enter
Does anyone know how the Services menu works? Is it always interprocess invocation, or can a service be code executed in the context of the calling process? If the latter this is a hard problem to fix. Otherwise Apple just needs to put wrappers around the execution code. Has anyone looked to see if it's possible to take advantage of this with SOAP and/or Applescript? Either way, this will be a good test of how seriously Apple takes security. I would hope that we see a patch for this in no more than a week or so. - -- Kee Hinckley - Somewhere.Com, LLC http://consulting.somewhere.com/ [EMAIL PROTECTED] (or ...!alice!nazgul for time travelers :-) I'm not sure which upsets me more: that people are so unwilling to accept responsibility for their own actions, or that they are so eager to regulate everyone else's. -----BEGIN PGP SIGNATURE----- Version: PGP Personal Security 7.0.3 iQA/AwUBO81zXiZsPfdw+r2CEQKKhgCg64BOHRt6j1iNYR30O99ZAOoY5ZcAoMj8 Da36qDdevrfYsMZrjwUzaJSt =bp5Z -----END PGP SIGNATURE-----
