What does FULL CONTROL mean? It means the Living Cookbook 2013 program can read your Quicken data file, it can overwrite your Quicken data file, and/or it can delete your Quicken data file. What permissions does the user John Smith have on your Quicken data file? Full Control. Huh? OK, let’s think about this: When the Living Cookbook 2013 program is running, what user is it running as? John Smith This means that it has FULL CONTROL over your Quicken data file. You can see that Living Cookbook 2013 is running as user “John Smith”. So, for the QDATA file, a person logged in as “John Smith” has these permissions: If you navigate to the C:\Program Files\QUICKEN directory, and do a right-click on the QDATA file, click on Properties, then click the Security tab: Let’s go look at the data file created by Quicken: If you click on “File” to see the pull-down menu, you can see what file Quicken is using to store your financial data: You can see that your Quicken program (QW.EXE) is running as user “John Smith”. Let’s take a look at your Quicken Program: When you run your Quicken program, it will be running as user “John Smith”. Then click on the browser’s Back button to come back to the article. Note: If you have trouble seeing the images, click on them to make them bigger. Once you have logged in, you can see your user name is “John Smith”: Let’s say your user name is “John Smith”. When you login to your PC, you login as your user. Any other Windows program that you install would have the same issue. They are just the example programs I chose. Note: I am not trying to pick on Quicken 2002 Deluxe and Living Cookbook 2013.
And, also suppose that you like to cook, so you download and install a recipe program (I choose “Living Cookbook 2013” as an example program). Suppose you are running a program where you enter (and store) sensitive financial data (I chose “Quicken 2002 Deluxe” as an example program). Also, make sure you read my follow-up post, How to Protect Your Quicken Data from All Your Programs. It’s at the heart of many other security issues that I’ve written about on this blog.
It’s a long post, but I encourage you to take the time to understand it. This is such an important issue that I submitted a vulnerability report to CERT.
For Mac OS X: You are running Mountain Lion (10.8) or later, and only purchase and run programs from the Apple App store.For Windows: You are running Windows 8 or later, and only purchase and run programs from the Windows App store.Note: The issue discussed on this page affects you if you use Windows or Mac OS X, unless you have taken the following precautions:
0 kommentar(er)
