On Saturday 21 February 2009, John Tapsell wrote:
> In the screenshot, the text service 'mileage tracker' comes from the
> untrusted .desktop file itself right? So couldn't the malicious
> .desktop file put any service name? Such as "system. This is a vital
> service - so you must click continue or risk breaking your system."

Yes. Hmm, every part of the .desktop file is untrusted, including the filename. I wonder what makes sense to put instead, if anything. I'd rather not leave the dialog completely devoid of a clue as to what the service is. (We will have the Exec= line once I get the Details button to work)

Regards,
- Michael Pyne