The Problem with Widgets Part Deux

Apple needs to spread the "are you sure you want to run this widget" popup across all widgets. And create a Widget Manager-esqe app to remove/move/play with widgets. This isnt as big of a security flaw as people are creating it. This is Apple Land, people update their OS's unlike Windows Land. Apple will fix this problem in 10.4.1 or atleast a Security Patch soon. 10.4.1 is already seeded to dev's, although i haven't heard much of a change list.

does this happen only if you run sfari, or does this happen if you run a 3rd party browser like firefox? i havent installed tiger yet cause i wanted to see what security issues popped up first...

thanks for the heads up on this one, you guys... just another reason i love tuaw

why to the widgets take up so much ram? a 500k widget shouldn't need 10 to 15mb of ram

I think that everyone is blowing this widget "insecurity" business ridiculously out of proportion. Widgets are mini-applications, and they should be treated as such. It's no secret that an errant application can easily be destructive; this is well-known. Any self-respecting user will not download an application without knowing what it does first, which is exactly the same precautions they should apply to widgets. As noted in this article, even if a widget is downloaded without your permission, it cannot do anything unless the user intentionally activates it.