<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"><html><head><meta name="qrichtext" content="1" /><style type="text/css">p, li { white-space: pre-wrap; }</style></head><body style=" font-family:'Droid Sans Mono'; font-size:10pt; font-weight:400; font-style:normal;">On Sunday 22 February 2009, Randy Kramer wrote:<br>
> What is the security concern that prompts the suggestion to open the<br>
> property dialog in the first 10 minutes after creating it? Is it a<br>
> concern that some unauthorized person walks up to a PC, installs<br>
> something insecure and then proceeds to use it?<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>I just figure that if we're worried about the scenario where someone is tricking into opening a trojan .desktop file, the creation time is the only bit of meta-data on the file which can't be controlled by the attacker, and users who have had their own launchers would presumably have taken more than 10 minutes to upgrade from 4.2. Just a thought is all.<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Regards,<br>
- Michael Pyne</p></body></html>