[plug] Cookies

Matt Kemner zombie at wasp.net.au
Wed Nov 29 14:33:25 WST 2000


On Wed, 29 Nov 2000, Bret Busby wrote:

> locate returned:
> "warning...slocatedb is more than 8 days old"

Which means updatedb is not being run on a regular basis.
(ie it's not in cron, which it really should be)

So have you enabled cookies? and gone to a site that uses cookies?
Netscape should create the file if it's not there.
 
> > You _do_ run netscape as a different user than the one you run everything
> > else with, right?
> 
> I assume that this is a security issue, and, from your statement, that I
> should have a user created, specifically to run netscape

I do.  I don't expect everyone to, and definitely not saying you should 
do so, but I think it's a good idea.

Any program that you cannot trust because the source code is not
available, or hasn't been audited extensively, should be given as little
access to your personal files as possible.

Anyone will tell you it's a bad idea to run Netscape as root, but in my
opinion running Netscape under a user account, if you use that user
account to do stuff like read email (or worse) is a bad idea too, because
if somebody were ever to find a bug in netscape that allows them to read
any file on your hard drive that Netscape can read, they can read your
email (and other personal files).

Mind you, running Netscape as a seperate user means giving that user
access to your X session which means if they can execute code as the
netscape user they can basically do what they want anyway, but at least
they are one more step removed, and means if all they can do is read/write
files the only files they can access are those belonging to the Netscape
user.

 - Matt the paranoid




More information about the plug mailing list