Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Snowy_River said:
True. So what do you think is the best way to flag applications? Modify the icon or the title? Or both?
Maybe the shape of the icon should indicate the type of item. Many applications use diamond-shaped icons, while documents are rectangles, often with the top right corner turned down. That's a nice convention.
 
Doctor Q said:
Maybe the shape of the icon should indicate the type of item. Many applications use diamond-shaped icons, while documents are rectangles, often with the top right corner turned down. That's a nice convention.

The only problem with this is that it would have to be a forced form constraint. Otherwise older applications would not conform to this convention, and it would therefore become useless. And how would the Finder handle a rectangular application icon? Hmm...
 
Snowy_River said:
The only problem with this is that it would have to be a forced form constraint. Otherwise older applications would not conform to this convention, and it would therefore become useless. And how would the Finder handle a rectangular application icon? Hmm...
By putting it within a larger (or same-size but scaled) diamond-shaped border.
 
Doctor Q said:
By putting it within a larger (or same-size but scaled) diamond-shaped border.

Yeah, that could work. To place a square icon into a diamond icon that fits into the current 128x128 square icon, the scaled square icon in the diamond could only be 64x64. So, this would be less than ideal. I think that I still prefer the idea of placing a mini-icon superimposed over the application icon.
 
dontmakemehurtu said:
I got my first copy of the virus off of Acquisition last night. Actually, it was this morning 'cause I was up til 1. Anyway, it wasn't a .sit or .dmg. It was an MP3. Acqusition showed me the supposed download of 4MB of data. It didn't even have an obvious name. I was downloading what I thought was the Diva's aria from "The Fifth Element."

It it wasn't encoded in some way, then it was most likely rendered harmless. Gnutella networks don't know anything about resource forks, therefore all the information necessary for the application to actually launch should have been stripped of (and in fact, it probably should have looked exactly like an mp3 to the finder, except that it wouldn't play as if it were corrupt).

dontmakemehurtu said:
Still, to be on the safe side, I didn't double click to open them. I used Quicktime's open command. I got a message saying Quicktime couldn't open it because it was in a format Quicktime didn't understand. Delving into "Get Info" I found what I didn't expect to find. I found a "Get Info" panel that looked more like one for an app than one for an MP3. It wasn't even 4MB in size. I've attached example images.

I've dumped the file. No trojans on this Mac. Ran Norton, which now has the definition for MP3Concept, and no damage done.

Thank you, common sense.

P.S. The images do not apply to the file I downloaded due to the fact that I dumped it as soon as I suspected it.

It would have been much more useful if you had given us screen shots of the get info panel that you did see. Given the method that you obtained the file with, I find it hard to think that this trojan could have even been executable or identified as an application instead of as an mp3. The only way I can think of this, is if Acquisition can automatically decode mac-binary of binhexed files and does this transparently to the user.
 
dontmakemehurtu said:
I got my first copy of the virus off of Acquisition last night. Actually, it was this morning 'cause I was up til 1. Anyway, it wasn't a .sit or .dmg. It was an MP3. Acqusition showed me the supposed download of 4MB of data. It didn't even have an obvious name. I was downloading what I thought was the Diva's aria from "The Fifth Element."

Still, to be on the safe side, I didn't double click to open them. I used Quicktime's open command. I got a message saying Quicktime couldn't open it because it was in a format Quicktime didn't understand. Delving into "Get Info" I found what I didn't expect to find. I found a "Get Info" panel that looked more like one for an app than one for an MP3. It wasn't even 4MB in size. I've attached example images.

I've dumped the file. No trojans on this Mac. Ran Norton, which now has the definition for MP3Concept, and no damage done.

Thank you, common sense.

P.S. The images do not apply to the file I downloaded due to the fact that I dumped it as soon as I suspected it.

This sounds like one of two things. Either a hoax, or a completely different situation.

Hoax:

1) I've never heard of gnutella networks misreporting file size.
2) These networks don't preserve resource forks, so if the file wasn't properly encoded it couldn't be a version of this trojan.
3) This trojan can be opened through the open dialog box in QT.

Something else:

1) If the file was not completely downloaded, this would explain why the file size was smaller than originally reported.
2) If the file was not completely downloaded, it could easily have been corrupted, and that would explain why QT couldn't open the file.
3) If the file was corrupted, then the Finder's attempt to provide all of the information that's shown in the Get Info pallet could have fallen short, resulting in a panel that "looked more like one for an app than one for an MP3"

Just my thoughts...
 
Rincewind42 said:
Given the method that you obtained the file with, I find it hard to think that this trojan could have even been executable or identified as an application instead of as an mp3. The only way I can think of this, is if Acquisition can automatically decode mac-binary of binhexed files and does this transparently to the user.

But gnutella is a peer-to-peer network. If you download from another mac user, the file never passes through a computer that doesn't support resource forks. I don't know much about how gnutella works, but since the file could be transferred directly from another mac, I think it is possible that the file could get through with the resource fork intact.
 
coolsoldier said:
But gnutella is a peer-to-peer network. If you download from another mac user, the file never passes through a computer that doesn't support resource forks. I don't know much about how gnutella works, but since the file could be transferred directly from another mac, I think it is possible that the file could get through with the resource fork intact.

That is only true if the client on both machines supports resource forks, and has the same protocol in place for identifying Mac clients and send them resource forks when requested. AFAIK no p2p client does this. Specifically, almost all of the gnutella clients I know of are written in java at their core, and they do nothing special to preserve resource forks (because they are designed to be cross platform rather than to be mac savvy).
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.