Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
If you have some interesting news or want to throw up a link to discuss it, here's the place. Anything is okay, even shameless vendor launches (since that is often applicable to what we work on). 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
Purefect Desktop Environment
Posted by: rsnake
Date: October 13, 2006 03:22PM

Does this make anyone else nervous?
http://www.klorofil.org/purefect-desktop-and-the-future-of-web-applications

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: Ghozt
Date: October 13, 2006 04:14PM

There's already something like this ( http://eyeos.org/ ) but it doesn't allow you to program your own apps for it.

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: Kyran
Date: October 13, 2006 04:45PM

Oh dear. That's all I have say. Oh dear.

- Kyran

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: rsnake
Date: October 13, 2006 05:43PM

Ugh. This just seems like a huge ugly can of worms. We already have enough problems with the operating systems we do have. If we have whole integrated desktop environments (the part with the most holes in it anyway) over HTTP the security risks there are enormous. Or is it just me?

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: Kyran
Date: October 13, 2006 05:52PM

Yeah. This feels horrible to me. If this gets an ounce of popularity there will be problems. Expect header, xss, csrf, etc. Due to the nature of trying to encompass an OS with web technologies, I bet it will have as many different exploit types as this forum has subforums.

- Kyran

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: rsnake
Date: October 13, 2006 06:03PM

If not more... I mean every single node and function will have an associated backend call that I can make on the user's behalf. Unless the entire thing is tied together with bazillions of nonces and they are input validation gurus I'm pretty hugely confident there will be more holes than can be readily counted.

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: jungsonn
Date: November 02, 2006 09:25AM

Nothing learned from Microsoft: hey how'bout another shell based browser! you, where it handy to execute executeables.

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: sjensen
Date: November 02, 2006 01:37PM

I'm sure with the proper marketing, it can and will become popular because users aren't concerned as much about security as they are with "Oh, that's neat!"

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: rsnake
Date: November 02, 2006 07:06PM

Which is largely why this site exists. I think it's important to temper the "oh, that's neat" with the obvious security implications that we can all come up with on our own. It's like giving a F16 to a kid. Sure, it's cool, but they're only going to screw it up, screw you up, or kill lots of people in the process. Just because it's cool doesn't mean you should do it, or that you shouldn't put safety controls in place.

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: jungsonn
Date: November 02, 2006 09:24PM

I agree,

For some reason it's obvious and fair that the people who are not tech savvy in any way, that they get busted on their own ignorance and technical disabilities. if one uses some technique, the risk that it implies should be considered at the same time.

microsoft stands at the cradle concerning:
"that-people-should-own-a-pc-and-know-nothing-about-it-evangelism"

i like the idea of windows, but they gone to far by letting MSIE run on the win32shell, sure its nice to browse your drives with IE and execute a program now and then, but it's the same as above, it implies risks, exploits, virusses, and eventually being owned by others, through one's own ignorance. That's the sheer beauty of it. :^)

So, would it be fair to claim that users are responsible to educate themselfs about computers? i think it does.

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: rsnake
Date: November 02, 2006 11:01PM

Ever wonder when Firefox will want to compete in that area and be able to surf your drive too? :)

But point taken. I'm actually a Microsoft fan from a consumer standpoint. It's easy to use and full featured. It's just too bad the security concerns really hurt the consumer at the same time.

- RSnake
Gotta love it. http://ha.ckers.org

Options: ReplyQuote
Re: Purefect Desktop Environment
Posted by: jungsonn
Date: November 03, 2006 02:35AM

Yes, that would be some scary stuff.

Options: ReplyQuote


Sorry, only registered users may post in this forum.