Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Possible security hole?' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Possible security hole?
Authored by: huzzam on Jan 28, '04 05:59:13PM

I don't have LaunchBar, but a possible security hole you might want to look into is this: when LB indexes the text file, where does it store the index? Is it written unencrypted to disk by any chance? That could be a vulnerability if there are other users you don't trust using the same machine.



[ Reply to This | # ]
Re: Possible security hole?
Authored by: henry on Jan 29, '04 10:00:37AM

I hadn't thought to check that, I must confess. Looking now I see that LaunchBar stores it's cache in this file:

~/Library/Application Support/LaunchBar/SetupCache.plist

Because LaunchBar is only indexing the names of the text files it doesn't present much of a threat. Unless you consider an attacker knowing which websites you frequent, and which cards you use, to be a threat. And if you're that concerned about security then you probably wouldn't use this system anyway.



[ Reply to This | # ]