HT202802 What "security vulnerability" will be opened by using this signing technique?
Regarding article: HT202802
OS X: Using AppleScript with Accessibility and Security features in Mavericks - Apple Support
The article says:
Important: Signing an applet using the following method introduces a security vulnerability that could allow malicious software to use Accessibility without user permission.
1. What "security vulnerability" will be opened by using this signing technique?
2. Does signing this way only make the App its applied to vulnerable only? and then the whole computer vulnerable depending on how extensive the app's reach is to the rest of the computer?
3. More information: My app only relates to the Reminders app and bunch of Finder items....nothing internet based, etc. That being said, is this still a vulnerability to my computer?
"Note: If you have your own signing identity, you may use that identity in place of “-” for the -s option."
1. What is "my own signing identity?" and if I don't have one, would it add security to get one and use it here?
Thanks for the help in advance!
1) There are a few system features, including accessibility, that will override any and all other security protections on you machine. This is the vulnerability. In giving the script the ability to control your machine, you give control of your machine to the script.
2) By signing the script, that control is permanent. If the app doesn't do anything malicious, there is no problem. But malicious apps sometimes don't manifest until later.
3) Did you write the app? If so, then there is nothing to worry about. If not, then how much do you trust the author of the app?
Generally, this isn't too big a deal. Apple is very protective, but most people generally hand over their passwords to anyone. They shouldn't, of course, but generally they do. They don't realize the extent to which they have handed over control of their machine and all of their data. Apple is trying to point that out.
Similar Messages
-
U/tube videos open when using Safari but will not open when using Firefox.
u/tube videos open fine when using Safari but will not open when using Firefox. With Firefox I get the unhighlighted Quicktime symbol with a question mark in the center. WHY?? Any help appreciated --- Toroya
Hmmmm, strange you view YouTube in Safari & not FF. Which version of FF are you using?
Try the following:
Repair permissions & restart.
Make sure you have the latest versions of Adobe Flash Player Software
QuickTime Preferences > Advanced > MIME Stettings > Miscellaneous.
Deactivate the "Flash Media" option. -
how do I open and use this app after I have paid for my subscription? I previously downloaded Primeir Pro CC for the trial and when I try to open the app it says my trial has ended and there is no other option to sign in and use the app?
Remove all current Adobe software. Download Adobe Cleaner Follow instructions.
-
If i download mountain lion will all user accounts use this operating system automatically? Or do I need to download it for each user... Its taking ages to download too.
Welcome to the Apple Support Communities
When you upgrade the operating system, all users are upgraded to be used with the new version, so you won't have to upgrade OS X each time for all your users -
I tried to update my itunes about 2 weeks ago. it started downloading, maybe it did all the way, i dont know. because everything stopped working. i can use safari/firefox, office programs and some others but when i try opening disk utility, software update, security (and other programs) they will not open. they come up in the bar at the bottom of the screen for a second then vanish with no warning or error (and no program actually opens).
at first i just deleted itunes completely thinking that was it but now I cant even download that again, as I cant use disk utility to open in.
also, i cant backup my files, i have no way. if i run the reinstall disk will it delete all my files or is there a way to only modify files?
thanks in advance for any advise!Hi, and a warm welcome to the forums!
Qyuick, do thus 1st...
"Try Disk Utility
1. Insert the Mac OS X Install disc that came with your computer, then restart the computer while holding the C key.
2. When your computer finishes starting up from the disc, choose Disk Utility from the Installer menu. (In Mac OS X 10.4 or later, *you must select your language first.)*
*Important: Do not click Continue in the first screen of the Installer. If you do, you must restart from the disc again to access Disk Utility.*
3. Click the First Aid tab.
4. Click the disclosure triangle to the left of the hard drive icon to display the names of your hard disk volumes and partitions.
5. Select your Mac OS X volume.
6. Click Repair. Disk Utility checks and repairs the disk."
http://docs.info.apple.com/article.html?artnum=106214
Then boot off the HD and...
About Disk Utility's Repair Disk Permissions feature...
http://docs.info.apple.com/article.html?artnum=25751
Reboot needed if many Permissions are fixed, and possibly reapply latest Combo Update also. -
HT4814 What ports need to get opened to do this remotely?
I looked through the list of ports commonly used here: http://support.apple.com/kb/TS1629 and forwarded what appeared to be the appropriate ports but this appears to only cover through Lion. I wouldn't have thought much would've chaged in that dept but who knows.
10.8.1 Server FYISorry, I should have specified. I'm using the server app. You can use it to manage other servers but it just times out. I've got the following ports forwarded:
22 SSH (will probably change at some point)
50 IKE?
331 Server admin
500 VPN&IKE?
660 Server admin
687 Yet more admin...
1701 L2TP
3283 ARD
5900 ARD/VNC
5988 ARD (kind of older I think)
Theres some others for sickbeard/sabnzbd etc, but those are the ones I've opened for the server. -
When I try to access Safari from my dashboard it tells me I am not connected to the internet. I am connected though!
I have to use Yahoo home page.
This fault only began yesterday (01/01/13)
I have downloaded my updates.
The original message when I tried to access Safari, told me my 'PC' was not working & I should 'fix now'.There was aslo a microsoft logo on the screen. Could this be a virus?I'm a bit confused as to what you're seeing. You say Safari isn't working, but then you say you have to use Yahoo... what browser are you using to access Yahoo?
If you were shown a message saying that your computer was infected and needed to be fixed now while you were browsing the web, you probably stumbled onto a site that had been hacked to trick the user into installing "fake anti-virus" malware. However, at this time, there is no such malware for the Mac, so this was undoubtedly something that would only work on a Windows machine (unless you have discovered something brand new).
What did you do when you saw this message? If you immediately quit Safari, it's possible it has gotten stuck trying to re-open that page every time you open Safari. Try quitting Safar and then holding down the shift key while re-opening it. This will prevent it from attempting to re-open sites that were open when it quit. -
I have been able to open files from this camera before but still checked for latest Camera Raw download. Still won't open files from this camera. Opens files from my 60D just fine. I downloaded the latest and it has worked before. What the heck is going on?
Glad to be of help. But I'm curious (not critical of what you are doing) to know why so many people like to use Nikon Transfer to transfer their files to the computer. It is still necessary to import them into Lightroom. And, from my perspective, it seems simpler and maybe even a little quicker to use the Lightroom import dialog. I have Nikon cameras, and have never even installed the Nikon Transfer utility. What is so unique about it?
-
When I open my Firefox browser, the normal 1 tab comes up. But when I attempt to open new tabs with the "new tabs" button, a new tab will not open. I have also tried right-clicking on the tabs toolbar but tabs will not open. The only way I can get a new tab to open is by right-clicking on a link and selecting the "open new tab" option in the right-click menu.
The Ask Toolbar is causing that in the Firefox 3.6.13 version. Disable that extension or un-install it.
-
when this error box opens the only way to close it is to shut the firefox process
Some how I solved my problem by opening a user account and downloading Firefox 4.0 beta and installing it, I did try it, worked fine, so I did close the user account and did go back to my own account(switched user), the main page that I had problem with Firefox which would not open, I dabble click on Firefox it start working again!! I hope that solves your problem too.
firefox will not open, it gives me this cod and would not turn off, Error on switching in renew: NS_ERROR_UNEXPECTED, Component returned failure code: 0x8000ffff (NS_ERROR_UNEXPECTED) [nsIPrefBranch.getCharPref] id: none -
Editor in elements 8 will not open. using windows 7 home premium. can this be fixed
editor in elements 8 will not open. computer has windows 7 home premium. steve
You may need to rebuild the editor preferences to resolve any conflicts.
Hold down the Ctrl+Shift+Alt keys and simultaneously click on the Edit button on the welcome screen. Release the three keys and look behind the welcome screen by closing it. Or hold down the keys whilst double clicking on PhotoshopElementsEditor.exe
You should see a pop up box with the words: Delete Adobe Photoshop Elements Settings File?
Click on Yes
Then wait whilst Elements rebuilds the preferences.
-
What is drag & relate. How to use this functionality.
Drag & Relate.
How to use this feature in SAP B1?
what are the uses ?
can we get reports using this based on parameters like date,BP,Items etc.
Regards
suresh kannanSuresh ,
Drag and relate functionality is a very effective Business reporting tool. The functinality is basically provided to in order to view reports as per the requiremnts of the user using seceral combinations as required. Follow these steps
I will give you and example
1. Click on the Drag and Relate Tab.
2 Open Business partner and double click on Business partner a list of BP's will open
3.Now open the Sales A/R
4. Now Left click on the Business partner code. A black box will appear . Now drag this BP code to the Delivery and place it. The system opens a list of all the deliveries for that particular BP.
Similarly you can try all other types.
Reward points if helpful
Nagesh -
What is repair request? when we use this?
Hi all,
what is repair request?
when actually we use this?
Thanks& Regards,
Ravi Alakuntla.Hi Ravi,
When you find some records missing when deltas are running then instead of going for re-init and again deltas you can go for repair full request giving selection conditions for those missing records, without affecting your delta laods.
Hope it helps,
Sunil. -
When using the Mozella Firefox 4 browser and the NEW version Adobe Reader X, PDF's online will not ever open. After 1-3 minuites, I eventually get a message the Adobe reader is running, but need to close and try again! I get same results when trying again.
Internet Explorer operates and opens the online PDF's all ok and the Adobe Reader X seems to operate all else ok!
I think, but not sure, that this issue appeared when the Adobe Reader updated from the older version 9 or so to the NEW Adobe Reader X version about 1 or 2 weeks ago, but not sure. I just remember that Mozella always worked ok previously to the Adobe Reader X version for opening online PDF's last month, etc.
Note that I said that Internet Explorer browser operates ok Using the New automatically upgraded Adobe Reader X for viewing PDF"S! (adobe notified me that the new version 10 (X) was available for updating, etc) I also just discovered that google chrome browser opens the online PDF's ok!
I have not trying re-storing the computer to the previous month, etc, since the issue seems to be with Mozella not liking the Adobe Reader X version and Internet Explored browser operating ok!
Any ideas????I had the same problem and my solution was to disable the PDF extension that came with Firefox 4 which belongs to another company. I found out that it wast interfering with ReaderX. I unabled it and restarted Firefox. I have had no problems since then. Go to Tools, Add-On and click on Extensions and disable the PDF extension. I hope this helps
-
Excel 2013 will not open file using double click
I have a problem with Excel 2013 running on Windows 7 Pro (64). When double clicking an Excel file from Windows Explorer Excel launches but opens a blank worksheet and shows me an error message (german: sinngemäß: "die Weitergabe eines anderen
Programms ist gescheitert"). The only way to view the document is by opening Excel and browsing to the saved file.
I have read similar forum entries which address this problem in older versions of Excel. I have tried every solution but none of them worked.
I already added the registry setting for shell open and set the Ignore Other Applications that use Dynamic Data Exchange (DDE) (unchcked).
The problem still persists. When I first installed Office 2013 it all worked fine. I believe the problem occured after installing Project 2013, but I am not quite sure about that. Reinstalling Excel did not help.
I´d appreciate any help,
Regards Stefan HasselHi,
Check the following steps:
1. Make sure that Excel is not running (exit the program).
2. Click the Start button to displays the Start menu.
3. From the Start menu, choose Run. Windows displays the Run dialog box.
4. In the Open box, enter the full path name to your Excel program, followed by the /regserver switch. If the full path name includes spaces, surround the full path name by quote marks. The following is an example of what you can enter in the Open box
(your path may be different):
"c:\Program Files\Microsoft Office\Office\Excel.exe" /regserver
• Click OK.
Jaynet Zhang
TechNet Community Support
Maybe you are looking for
-
I have just synced my ipad with my itunes on windows and have now lost the original music library on the computer leaving me with just the downloaded songs from my ipad. I don't have the original library on icloud for some reason and was wondering if
-
I have over 200+ songs that iTunes deems intelligible, how do I get them on my device?
-
Hi, I want to do stock Transfer from one Plant to another Plant in the same company. Pls. tell me about the process & the configuation needs to be done. Regards,
-
Translating to reporting currency
HI FRIENDS, I HAVE SELLING PRICE DATA FIELD /BIC/YSELPRICE IN ODS UPDATE RULES BASED ON SELLING PRICE CURRENCY. YREPSALES OTHER FIELD IS SOURCING FROM /BIC/YSELPRICE BUT TO BE TRANSALTED INTO REPORTING CURENCY HERE. MY REQUIREMENT IS TO TRANSLATE T
-
SCORM "Complete" and Quiz Settings
Any ideas? One question in course. I edit question so it has zero points. I change quiz mgr. settings to report pass/fail. User answers question and course is marked "complete." I don't want it to be marked complete. Captivate is passing a "c" someho