Filed under: OS, Software, Tips and tricks
On Saturday, I posted a bit about the problem with Safari's auto-installation of Widgets. Today, Dori Smith of Backup Brain has written an article for MacCentral on the topic, called Dashboard Widget (In)Security that offers a more detailed view of the situation along with a good dose of what to do and what not to do. Reply in the Mail.app with a specific quote.
Select the text you want quoted and then hit the reply button.
Only your selected text will copied to the reply email.
![TUAW [Cafepress]](http://www.blogsmithmedia.com/www.tuaw.com/media/tuaw-cafepress-promo.png)
| # | Blogger | Posts | Cmts |
|---|---|---|---|
| 1 | Steven Sande | 48 | 4 |
| 2 | Dave Caolo | 32 | 1 |
| 3 | Mike Schramm | 31 | 0 |
| 4 | Mel Martin | 30 | 0 |
| 5 | TJ Luoma | 22 | 31 |
| 6 | Michael Rose | 20 | 19 |
| 7 | Josh Carr | 17 | 24 |
| 8 | Victor Agreda, Jr. | 16 | 7 |
| 9 | Erica Sadun | 16 | 2 |
| 10 | Joachim Bean | 14 | 2 |
| 11 | Sang Tang | 12 | 1 |
| 12 | David Winograd | 11 | 17 |
| 13 | Ken Ray | 11 | 2 |
| 14 | Brett Terpstra | 8 | 8 |
| 15 | Megan Lavey | 7 | 9 |
| 16 | Chris Ullrich | 4 | 1 |
| 17 | Aron Trimble | 4 | 3 |
| 18 | Kent Pribbernow | 4 | 0 |
| 19 | Tim Wasson | 4 | 1 |
| 20 | John Burke | 4 | 3 |
MacOsX iphone SnowLeopard Snow-Leopard AppleTv IpodTouch Iphone3g iphoto Apple AppStore talkcast itunes software developer AppReview OsX keynote gps MacbookPro mac macbook ATT app-store tablet hgg ItunesLp navigation video Windows7 giveaway IpodNano wifi update ipod tips app Iphone3gs ipod-touch features MacMini imac twitter rumor podcast AppleStore upgrade SoftwareUpdate sales gaming games
All contents copyright © 2003-2009, Weblogs, Inc. All rights reserved
The Unofficial Apple Weblog (TUAW) is a member of the Weblogs, Inc. Network. Privacy Policy, Terms of Service, Notify AOL
Reader Comments (Page 1 of 1)
Brock Batsell said 4:18PM on 6-16-2005
I think that everyone is blowing this widget "insecurity" business ridiculously out of proportion. Widgets are mini-applications, and they should be treated as such. It's no secret that an errant application can easily be destructive; this is well-known. Any self-respecting user will not download an application without knowing what it does first, which is exactly the same precautions they should apply to widgets. As noted in this article, even if a widget is downloaded without your permission, it cannot do anything unless the user intentionally activates it.
Reply
John D said 10:34AM on 8-21-2005
why to the widgets take up so much ram?
a 500k widget shouldn't need 10 to 15mb of ram
Reply
Jonathan Schroeder said 4:18PM on 6-16-2005
thanks for the heads up on this one, you guys... just another reason i love tuaw
Reply
teksno said 4:18PM on 6-16-2005
does this happen only if you run sfari, or does this happen if you run a 3rd party browser like firefox?
i havent installed tiger yet cause i wanted to see what security issues popped up first...
Reply
Travis said 4:18PM on 6-16-2005
Apple needs to spread the "are you sure you want to run this widget" popup across all widgets. And create a Widget Manager-esqe app to remove/move/play with widgets. This isnt as big of a security flaw as people are creating it.
This is Apple Land, people update their OS's unlike Windows Land. Apple will fix this problem in 10.4.1 or atleast a Security Patch soon. 10.4.1 is already seeded to dev's, although i haven't heard much of a change list.
Reply