[Adium-devl] Exposed preferences via AppleScript
Chris Forsythe
chris at adiumx.com
Thu Aug 16 16:04:39 UTC 2007
On Aug 16, 2007, at 9:08 AM, Peter Hosey wrote:
> On Aug 16, 2007, at 03:36:46, Colin Barrett wrote:
>> Definitely don't think we should allow account creation and
>> deletion via AppleScript. That seems a bit dangerous.
>
> Mitigations:
>
> 1. Only allow these if Adium is active. If you don't activate Adium,
> you can't create or delete accounts from Adium.
> 2. When a script tries to do that, it presents a dialog box. Adium
> doesn't reply to the event until the dialog box is answered. If the
> request is refused by the user, Adium returns userCanceledErr.
I'm not a fan of this idea Peter, I'm with Colin on this one.
>
>> Allowing a script to pull your password out to plaintext also seems
>> dangerous as well.
>
> Fully agreed.
Thirded.
More information about the devel
mailing list