if muscle allows SCardControl to send proprietary comands to the CCID driver support an IFD, then its possible that a rogue IFD will forward inappropriate commands, or even generate inappropriate commands, to reconfigure the reader's firmware. IN one case, WITH GemPlus support and technical assistance, this was used to "re-configure" one of the reader's memory mapped io ports, allowing the PCMCIA reader with gemcore firmware to also support a finger-reader - a post manufacture change which happened to be positive in nature.
Windows took care of the general exposure introduced by unintepreted commands by requiring explicit configuration of the trust level, by the operator - requiring install scripts to explictely turn on the APIs support for passing uninterpreted commands through SCardControl. We may wish to do the same, using appropriate UNIX/muscle traditions.
_________________________________________________________________
Get rid of annoying pop-up ads with the new MSN Toolbar � FREE! http://toolbar.msn.com/go/onm00200414ave/direct/01/
_______________________________________________ Muscle mailing list [EMAIL PROTECTED] http://lists.drizzle.com/mailman/listinfo/muscle
