Monthly Archive:: December 2004

Happy New Year!

From all of us here at OSNews, Happy New Year! 2005 promises to be an exciting year in technology - what surprises do you think this year will hold? What news do you think will top the technology news sites in 2005 - Linux? SCO? Microsoft? Firefox? Security? Wireless networking? A destructive new worm? Share your thoughts here.

Calling Components Safely

Clicking on a hypertext link while viewing a PDF file shouldn't be a security problem as long as you trust the viewer it invokes. But users of xpdf version 0.90 discovered that this assumption was an extremely bad one. When an xpdf user clicked on a hypertext link, xpdf started up a viewer (Netscape by default) and sent the URL to the viewer. So far, so good. But the xpdf developers decided to start up the viewer by using the system() call. That was the bad idea..