Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Use iChat as a command line interpreter' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Use iChat as a command line interpreter
Authored by: sampsa77 on Nov 07, '05 08:00:12AM

This seems like a pretty risky thing to run if you ask me. Maybe add some kind of challenge/response authentication to the protocol, simply running arbitrary Unix commands remotely seems really risky.

And no, simply trusting the iChat servers for authentication isn't enough, it's easy enough to spoof a packet to look like it comes from an iChat server.

Use this with extreme care, especially in production environments.



[ Reply to This | # ]
risky
Authored by: hayne on Nov 07, '05 02:57:27PM

I agree that this is rather risky.
It certainly wouldn't be a good idea to have this running all the time until the security features have been improved.
It might be quite useful however in a remote support situation - you could get your Mum to run this app when needed and then you would be able to control her machine without having to set up a lot of stuff beforehand.



[ Reply to This | # ]
risky
Authored by: pecosbill on Nov 07, '05 03:31:16PM

I agree that this is too risky. Unix is way too powerful to allow full access (despite the attempt at user identification). I would only limit it to selected, pre-written applescripts. Anything else should use SSH as that's what it is for!

---
Pecos Bill



[ Reply to This | # ]
VNC
Authored by: SeanAhern on Nov 08, '05 07:45:50PM

Having Mum run a VNC server would be much more useful, since you could actually "drive" the display. More secure, too.



[ Reply to This | # ]