On 3 Apr '08, at 11:03 PM, Apparao Mulpuri wrote:

What type of Security issues are there in Windows appearance attributes change?
Jens, Could you please explain your reply clearly?

A window's pixels are accessible only to the process that owns the window, and to the window-server process (which is responsible for copying them to the screen.) If other processes could write into them, which is what your feature would require, then (a) a buggy process could write garbage into other applications' windows, messing up the entire screen; (b) a malicious process could write fake content into other applications' windows. For example, hiding a system security alert by clearing it to transparent. Even reading the pixels could be a security problem if there were confidential data in the other app's window.

You haven't even explained _why_ your app would need such a feature, or what it's for in the first place. What's the use of an app that draws squares on my screen and changes other apps' windows colors when they move into them?

—Jens

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [EMAIL PROTECTED]

Reply via email to