Abiword report generator [was Re: Dynamic data queries]

msevior at physics.unimelb.edu.au msevior at physics.unimelb.edu.au
Tue Mar 9 10:01:02 CST 2004


>
> Hi Martin,
>
> Well, I wouldn't have written the previous email if I'd read this one
> first.  You cover all the issues of nesting & etc. that I was concerned
> about.
>
> On Tue, Mar 09, 2004 at 09:28:55PM +1100, msevior at physics.unimelb.edu.au
> was heard to remark:
>> OK we could do this securely if Abi was linked into your app's address
>> space or if it was specfically invoked with the PID of the calling
>> process
>> or if activated as a bonobo component.
>
> ? what security exposure is there?
>

Oh, imagine you're typing your ultra-top secret document explaining to
your fellow conspirators how GNU-Cash actually has a hidden back-door that
allows you to extract financial records from all your users when suddenly
an external process attaches itself to your AbiWord program and extracts
all the text....

Or more mundanely you're writing a reference for someone..

Cheers :-)

Martin



More information about the gnucash-devel mailing list