Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the '10.5: Disable the 'downloaded from internet' file warning' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.5: Disable the 'downloaded from internet' file warning
Authored by: fbitterlich on Aug 25, '09 08:01:07AM
... well, I know they came from the internet; I just downloaded them! Even plain HTML files can't be opened without clicking that stupid OK button.

Well, you'll be glad that the stupid OK button is there once the crooks have figured out how to cause a drive-by download in Safari plus launching that file (for example, exploiting that stupid "automatically open 'safe' files" setting that is sadly enabled in Safari by default).

Of course, there's some reason for Apple to put the safety warning there, but ... if you know downloaded the files, because you wanted to open them, why not just get rid of that dialog box once and for all?

That's the key issue here. If you downloaded them intentionally. If you didn't, that is the last barrier to save you from being pwned.

[robg adds: ... though I wish there were some user control over when it would appear (for instance, opening said HTML files shouldn't evoke a warning dialog). ...]

It should evoke that warning. By all means, it should. Because once you have downloaded that "HTML" file to your local volume, the Javascript inside that file gets a whole new set of privileges. For example, access to your local files (keyword: same origin policy).

Guys'n'gals, before you start tinkering with the security settings of your machine, you should be 200% sure what you're doing. This hint is downright dangerous.



[ Reply to This | # ]
10.5: Disable the 'downloaded from internet' file warning
Authored by: mael on Aug 25, '09 08:51:31AM

> This hint is downright dangerous.

For the uninitiated, maybe. But then, no reason not to post it.

I know too many people who'll ignore the warning dialog once they are used to it. No harm then, if it doesn't come up at all anymore. For that to happen they need to search for a way to do so (or accidentially come across this page) and then *do* something about it (like moving the said plugin). This hint only shows *how*. Nothing will happen just by reading it.

Don't get me wrong: I appreciate your remarks - at least they make those, not sure about what they are going to do think about it again. But there is no reason to be come across so emotional and self-rightous. Nobody forces anybody to follow the hint. Free choice.



[ Reply to This | # ]
10.5: Disable the 'downloaded from internet' file warning
Authored by: emale on Aug 25, '09 09:16:47AM

A short reply to fbitterlich:
Disabling this warning is the same risk than not disabling it - because when you're downloading lots of files a day you will never think "oh, is this a really safe file? where did I download it?" before pressing the "OK" button on the warning message.
This warning message is for me as for most of the people useless.



[ Reply to This | # ]
a file downloaded from the Internet is like a person that you have invited into your house
Authored by: hayne on Aug 25, '09 07:16:31PM

Downloading a file from the Internet is analogous to welcoming someone into your house. If you are downloading so many files from the Internet each day that you don't have time/energy to pause and consider whether each one is something that you trust, then it's like having a steady stream of strangers entering your house.
I.e. in that case, security is already a lost cause and you'd better have inside defences like those of heavily touristed buildings like the Empire State Building.

The confirmation dialog is useful for those with a more normal level of "incoming" - it's analogous to having a "peephole" in your door so you can see who is knocking.



[ Reply to This | # ]
10.5: Disable the 'downloaded from internet' file warning
Authored by: hamarkus on Aug 26, '09 11:35:00AM
because when you're downloading lots of files a day you will never think "oh, is this a really safe file? where did I download it?" before pressing the "OK" button on the warning message.
Except that this warning only shows up with applications (and scripts) and only shows up when you start/run the application/script by double-clicking on it. All ordinary files you download are unaffected by it.

[ Reply to This | # ]
10.5: Disable the 'downloaded from internet' file warning
Authored by: Fairly on Aug 25, '09 10:00:07AM

Totally agree with parent. Those were wise words. You do NOT always know where things come from. As parent says, it's there to alert you to possible drive-bys. The whole quarantine system in launch services in 10.5 is there to protect you.



[ Reply to This | # ]
10.5: Disable the 'downloaded from internet' file warning
Authored by: msadesign on Nov 05, '10 05:56:56PM

This is a an old thread, so I'll stick my head up and see what happens: With Safari's new architecture does anyone know how to disable this critter in Safari 5?



[ Reply to This | # ]