Developer demonstrates Dashboard exploit
A developer has demonstrated a Dashboard exploit in Mac OS X 10.4 Tiger that a malicious Web site owner could use to install widgets you might not want on your Mac.
Writing under the name of Stephan.com, the developer said that a combination of Apple's lack of documentation for removing widgets, Safari's download controls, and a widget feature all make it possible for the bad guys to use Dashboard to take you to any Web site of their choosing, hijacking Dashboard for their nefarious purposes.
By Bryan Chaffin at MacNewsWorld.
[ Read more ]