Scary .desktop behaviour

[Scott James Remnant]

On Tue, 2005-01-04 at 14:35 +0100, Julien Olivier wrote:

> > > Attached is a fun example.
> > 
> > I don't get the point, there is a million of way to launch a command,
> > what's specific to the desktop files ?
> 
> As I understand it, .desktop files are the only ones that can be sent
> attached in an email and executed right after being downloaded without
> any manipulation (apart from right-clicking it).
> 
Exactly, and they're not automatically made executable when saved.  The
user has to explicitly make them executable, and thus be pretty aware
that what they're about to do could be bad.

Scott
-- 
Scott James Remnant
scott at canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.ubuntu.com/archives/ubuntu-devel/attachments/20050104/c40c95cb/attachment.pgp