Slashdot is running an article about Dashboard
http://it.slashdot.org/it/05/05/08/2131208.shtml?tid=172&tid=179&tid=3
Dashboard has a major security flaw. Websites can automatically install widgets on your system. Now, say they name this new auto downloaded widget calculator. Any the user opens this widget, well then the widget could start opening a million webpages, or make it hard to close. They widget could to some social engineering, make you think the widget was from google, and then get you password.
In short automatically installing widgets is a miss feature that needs to be fixed ASAP.
http://it.slashdot.org/it/05/05/08/2131208.shtml?tid=172&tid=179&tid=3
Dashboard has a major security flaw. Websites can automatically install widgets on your system. Now, say they name this new auto downloaded widget calculator. Any the user opens this widget, well then the widget could start opening a million webpages, or make it hard to close. They widget could to some social engineering, make you think the widget was from google, and then get you password.
In short automatically installing widgets is a miss feature that needs to be fixed ASAP.