Screenlets and safety

[plun]

Just read this about something from Redmond..... :o

http://www.pcworld.com/article/id,136016-pg,1/article.html

Also this about "broken" Ubuntu servers....

https://lists.ubuntu.com/archives/loco-contacts/2007-August/001510.html


I cannot judge Screenlets but several is using Internet functions...

"Better to think before then after".... :)

[vadi]

Except that it said there that those gadgets are enabled by default in Vista, whereas screenlets are something that only an experienced users can get...

Win!

[plun]

Except that it said there that those gadgets are enabled by default in Vista, whereas screenlets are something that only an experienced users can get...

Win!

Well..... Screenlets is becoming really popular...:D

http://www.gnome-look.org/index.php?xsortmode=down&page=0&xcontentmode=165

5741 downloads only for the sidebar in a few weeks.

This is something for our devs to maybe think about :rolleyes:

[eosten]

But that's not necessarily the end goal of screenlets, vadi.

'You don't have to use this' isn't a way to fix a security problem; it's a way to make the problem worse. In the end, you have to be responsible and fix the problem, which is what I would do with my network-using software, and what anyone should do in the same situation.

[whise]

well i guess its a good thing its open source , and everyone can check it for bugs or other stuff

[plun]

well i guess its a good thing its open source , and everyone can check it for bugs or other stuff

Yup....:)

Nevertheless I hope that RYX, you and other devs can make some
principles how Screenlets can be a safe application.

I know from myself (lazy :p) and a mess with removed root permissions for different Screenlets that this is not so easy.

Compare it with another eyecandy app AWN which moved to Launchpad.
Security contact and so on

https://bugs.launchpad.net/awn/

I am just thinking.... I really like Screenlets, specially latest which you built :D

[RYX]

Ummm - I can assure everyone that the screenlets are quite safe by default. None of the default screenlets connects to any server (except MailCheck which is explicitly marked as not safe yet). Unless your system isn't captured by a hacker or a virus there is no way to abuse the screenlets (and even if there was, those guys would still know much better ways to hurt you).

The problem generally is that people give a sh*t about WHERE they download things. The typical windows user simply clicks any nice popup containing a Download-link ... and ka-boom, there is the malicious software.

A few rules for safety:
1. NEVER run a screenlet with root permissions or through sudo!!!
2. NEVER run a screenlet with root permissions or through sudo
3. Use trusted sources! Do not download screenlets from any location/forum you come across, if unsure better ask me first
4. Check the screenlet code for suspicious internet URLs. If the code contains URLs but the screenlet isn't expected to connect the internet you shouldn't use it (maybe I'll add an automatic check for that to the new manager)
5. remember 1? ;)

(And the screenlets will move to launchpad as soon as I have eliminated the last TODOs for the first big release (0.2/0.3) ... promise!)

:)

[plun]

Thanks RYX... !

The world is full of "bad guys".....i learned that in another life
with other "windows"...:p

I am looking forward to test the new version....:)