On Sun, 2007-05-13 at 15:00 +0000, Sebastien Bacher wrote:
> The default would be on cancel and the text explains to user that they
> are trying to open a file which has a content different of what the
> filename indicates which could be a trojan

That risk could only ever occur if one tries to run a program/script. In
which case, issuing a warning that a program/script is about to be
executed would be more appropriate and prevents this "bug" occuring for
all other filetypes.

The real culprit here is simply that the feature is looking for a
difference between what type the file is and what type a windows user
will think the file is, when it should be looking for a difference
between whether the file is a script/program to be executed and whether
a user will expect a script/program to be started.

Most users shouldn't be running programs by double-clicking files in a
filesystem browser so I can't see that it is a sensible default. IMHO,
the ideal solution would be not to run programs and scripts but rather
open a metadata viewer with an execute feature. Same should go for debs,
too - open a metadata viewer which I think is what happens already. That
makes it clear to the user what the real type is and requires that they
be explicit that they want to run the program/install the package.

In that case I think the current feature should be limited to
scripts/elf/pe/debs etc and a spec started to stop running things on
double-click for the future.

What do you think?

-- 
Tristan Wibberley

-- 
nautilus's clever anti-hax0r detection is really dumb
https://bugs.launchpad.net/bugs/19101
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is a direct subscriber.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to