[RFC] Security and Features in KPDF

[Tobias Koenig]

On Mon, Jan 03, 2005 at 11:17:31PM +0100, Waldo Bastian wrote:
> On Monday 03 January 2005 00:19, Tobias Koenig wrote:
Hi Waldo,

> > This is really a save solution. When the user still clicks on 'Ok' and
> > the virus/wurm is executed... well, that's the users problem.
> 
> The idea of KDE applications is to help the user solve the problems (s)he 
> already has, giving the user more problems is counter-productive.
I don't want to create new problems, maybe with the dialog we can even
educate the users a bit.

> > So I'd like to ask the core-developers if it's ok to add this feature to
> > KPDF again together with the necessary security options.
> 
> No, I don't think that's ok because many users will not have enough relevant 
> knowledge to decide what to do when confronted with such dialog, "kjots" and 
> "rm -rf" are equally cryptic to many.
Ok, but we can't help these kind of users anyway... when they read in a
web forum

  Optimization Tips for Linux

  To get more space on you hard disk under linux just type in the
  following commands:
    su
    <type in your secret password>
    rm -Rf /

then they will do it. It doesn't matter if this information is part of a
web forum or part of a PDF file. If the user doesn't understand what he
is doing he shouldn't do it.

> I suggest that you add a command line option to explicitly
> enable such dangerous behavior as Stephan Binner already
> proposed.
Ok, that's a reasonable compromise solution IMHO,
thanks for discussion.

Ciao,
Tobias
-- 
Separate politics from religion and economy!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20050104/4e82f8c8/attachment.sig>