Tuesday, August 10, 2010

[auevkxql] Vetting permissions by third party

Application X wants these permissions.  Should you grant them?  Consult a trusted third party which says those are a reasonable set of permissions to grant for the task the application promises to do.  Or grant only a subset of requested permissions recommended by the third party.

No comments :