4 ms·
>Security warning for macOS users: The Cocoa webkit platform port has been dropped in 1.2.2 and it's currently not possible to build it without exposing Next to
by inflatableDodo 7y ago
>Security warning for macOS users: The Cocoa webkit platform port has been dropped in 1.2.2 and it's currently not possible to build it without exposing Next to a remote-execution vulnerability. We recommend macOS users to wait for the next release which will feature a new platform port.
Anyone out there with a good idea of how serious a risk this is?
Edit - I mean, it sounds very serious, so I don't really want to run it on OSX. That said, I woudn't mind knowing if I am being overly careful here.
- jmercouris 7y agoBasically the issue is, someone can craft a URL that when you visit it it will allow the execution of arbitrary Lisp code on your machine- a huge problem. The likelihood of someone setting up such a website/link is low, but full disclosure is the policy we've decided to adopt.
- inflatableDodo 7y agoAhh, that is a problem. Though I sort of like the idea that you are accidentally making macs into remotely operated lisp machines.
- masukomi 7y agoWhen the malicious hackers take up lisp... THEN we'll really have something serious to worry about. ;)