On 1/17/06, Cliff Wells <[EMAIL PROTECTED]> wrote: > > Really? How? The URI is hardcoded into the client application, so the > only place to acquire potentially "unsafe" code is from the place where > they acquired the original application. >
The URL is hardcoded, but the DNS isn't, nor is the hosts file, so a malicious bit of software could modify how the client accesses that url. However this is unlikely and it would have to target your software specifically. Still, it's a consideration.
