144.2802 Change of
Is AppleScript too powerful?
This latest Mac "trojan" was a little funny if you ask me. Say you like to download things from a p2p network. Say you don't like to pay for any of the software you use. What types of things do you look for in the quality of these files? I personally would think that if I were downloading an office suite like Microsoft Office, it would be at least a couple hundred megabytes in size. As I scanned down the column looking for this app, I would probably go right by this "trojan," because folks tend to share files they are downloading, even though they aren't completed. Also, folks seem to have tons of incomplete and useless crap in their shared directories. That's just me and maybe I tend to over think things a bit.
So let's say my reason gave way to abandon, and I downloaded this file any way. I navigate to my shared directory, pumped up by the fact that I managed to get a copy of Office in less than three seconds and I double-clicked on it. Do I deserve to have my home folder wiped out? Probably. That's my no nonsense way of thinking, but it's not fair to all the goofy folks out there in p2p land. So I propose a different solution. Could Apple possibly add a safeguard into their code that sets off a flag when a script wants to do something so odd? I'm not saying Apple is by any stretch of the imagination "at fault" because something like this can happen, but maybe no script should be allowed to remove the entire contents of a users home directory. I would think that it would be a good thing to have this flag pop up a dialogue that asks the user if they really want this script to do something so screwy. Being in the system admin biz, I'm sure that wouldn't help a bit. Most people just click "ok" on the box and let things happen without reading it anyway. There are a few people who leave the box on the screen and run to my office. They're by far my favorite, unfortunately, few and far between.
I know that I wouldn't buy or use any software that as a part of its installation routine required me to empty my home folder. At least if something as odd as this would trigger a simple dialogue box, this sort of nonsense would fall into the prank category, instead of wasting our time being logged as the first Trojan horse for Macintosh. Rub those two pennies together for a while. If only common sense were as cheap as an eMac.
Thanks for reading,