canonballs
Leading Member
I never claimed any propagation qualities or that this was a virus. There is one thing I forgot to find out at the time: does it only appear to the user as a document, or does OS X view it as a document as well before it is opened? If the system mis-identifies an application as a document, i would, form my average-user perspective call it a serious matter. If just the user is deceived then this, while not technically a deficiency, is unfortunate. Not a big deal - just a matter of allowing applications have . occur in their names. In a nice OS this could be mitigated by having documents appear in the Finder visually different from applications.LOL!!! I remember this thing... oy... oh boy.. you know I forgot
about it because it was such a joke. Did you read the entire
article? Read this:
Why is this so? Simple. This "file" is not a flat file that isThe program can't be spread by e-mail or through a file-sharing network unless it is compressed
using software like Aladdin's Stuffit. Failing to compress the MP3 file before sending it renders the
software inoperative.
common with today's Mac OS X/Windows environments... rather it is a
binary... it contains a resource fork and a data fork that harkens
back to the old OS 9 (and older) era. Consequently, this
signficant clue of the program being knocked out by standard MIME
wrap (with email transport) shows how fragile the old-skool
Macintosh resource fork is. 1.) This is not a virus. 2.) It is
barely a concept trojan. For it to be a viable trojan... it must
transport effectively... if you can't email it easily... then the
concept falls flat.
Remember what I said before? I said that it is technically
feasible to compile malicious code that will affect the Mac... but
getting it to RUN on a Mac.. getting it to WORK on a Mac... that's
a differrent story altogether... and I never see why this would
ever change.
I figured that's the part you were not getting.OK, I did not realize one needs an actual username instead of ~ inYeah.. but what is the tilde referencing? You need a user name toHow aboutDocuments for the role of vulnerable directory?
complete the path.
this context.![]()
I did not claim it was possible, even less that I knew a recipee for a viable exploit, but I had the impression that someone with better skills than myself might be able to turn the collection of security holes in May '04 into something malicious. If you say this is not so, I will believe you.I was getting frustrated when you kept maintaining how something
was possible.. and I knew it wasn't.
I'm not sure what this is supposed to illustrate. I don't have a Users directory within my home folder.Try this... go to the Finger's "Go" menu and choose "Go to
folder..." and type in the patch box "Documents." Yes.. it will
pop open the Documents folder that is COMMON with you as the user.
BUT.. do you think you can use the tilde trick for anything? Try
" Users" and tell me how far you get?
--
canonballs