[TETENAL]

http://docs.info.apple.com/article.html?artnum=300368

iCal now informs the user about unsafe alarms.

[ae77]

nice addition

[ManOfSteal]

[TETENAL]

Originally posted by ae77:
nice addition

Why would it be a security risk? It could only launch applications that are on your hard disk anyway. And there is no way to include an application with an iCal calendar.

[ae77]

hmm... come to think of it, you are right. iCal author has to know what's on your disk. that author could somehow already put an app or a script on your disk (via email attachment?). but that's not very likely.

Originally posted by TETENAL:
Why would it be a security risk? It could only launch applications that are on your hard disk anyway. And there is no way to include an application with an iCal calendar.

[Spheric Harlot]

Originally posted by ae77:
hmm... come to think of it, you are right. iCal author has to know what's on your disk. that author could somehow already put an app or a script on your disk (via email attachment?). but that's not very likely.

Well, it should be able to open fsck, for example - the author would know quite well where that is.

Also, there might be other exploit potential in the future, n'est pas? Better to implement something like this right off the bat to nip it in the bud. </clichée phrase dropping>

[bborofka]

I don't understand this. Apple puts out this update, but I'd much rather have reoccurring To-Do's, FTP publishing, and auto birthday importing (among other things) than have this obscure security issue resolved. Are we gonna have to wait all they way till Tiger before we see any improvements to iCal?