aMule Forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

We're back! (IN POG FORM)

Author Topic: Serious SECURITY Bug: unwanted shared files!!!  (Read 2843 times)

aMuX

  • Approved Newbie
  • *
  • Karma: 0
  • Offline Offline
  • Posts: 44
Serious SECURITY Bug: unwanted shared files!!!
« on: November 12, 2006, 02:31:31 PM »

Hi,

aMule 2.1.3 shares BY DEFAULT all the files that are not folders that I have in the first level of my bootin Mac OS X 10.4.8 hard disk. Even if I do not select anything to share at "aMule/Preferences/Directories/Shared Directories". Likewise if I create a new folder and choose to share ONLY such new folder.

Among the unwanted shared files (that show on the aMule Shared Files Window) are visible and invisible files like:

Desktop DB
Desktop DF
installer_debug.txt <-- Visible
mach
mach_kernel
NAVMac800QSFile
ReadMe.txt <-- Visible

What gives? Is this a serious security flaw of aDonkey 3.1.3 on Mac?

ACTUALLY, IF YOU SEARCH IN AMULE FOR SUCH NAMES, LOTS OF HITS SHOW!!! --DOES IT MEAN THIS IS A BUG OF AMULE?

Thanks.
« Last Edit: November 12, 2006, 02:35:23 PM by aMuX »
Logged

ken

  • Hero Member
  • *****
  • Karma: 4
  • Offline Offline
  • Posts: 825
Re: Serious SECURITY Bug: unwanted shared files!!!
« Reply #1 on: November 12, 2006, 05:24:00 PM »

I think this is probably user error, although it probably results from bad interface design on our part.  If you go into Preferences -> Directories, there's the list of shared directories.

Many people might think that they should double-click a directory to expose its subdirectories, to navigate to the directories that they really want to share.  However, double-clicking a directory name tells aMule to share that directory!  The shared status of the directory is indicated by the name being drawn in bold.  For the root directory ("/"), that visual distinction is very, very subtle.

So, I'd recommend that you go into that preferences pane and double-click on the root directory a few times to toggle it back and forth, watching for the subtle change.  Make sure you leave it in the unbold state, if you don't want it shared.
Logged

aMuX

  • Approved Newbie
  • *
  • Karma: 0
  • Offline Offline
  • Posts: 44
Re: Serious SECURITY Bug: unwanted shared files!!!
« Reply #2 on: November 12, 2006, 06:15:03 PM »

ken,

You are absolutely right! A million thanks!!! A bit tricky though, and hard to spot unless you know about it. Actually, as I said above, a lot of Mac OS X users out there have the full "/" shared because searching for the files that I listed (above) on aMule finds them!

On the other hand, is there a way to share with aMule only fully downloaded files excluding the partially (Temporary) downloaded files?

Thanks again. aMule rocks on Mac OS X!
« Last Edit: November 12, 2006, 06:16:55 PM by aMuX »
Logged

wuischke

  • Developer
  • Hero Member
  • *****
  • Karma: 183
  • Offline Offline
  • Posts: 4292
Re: Serious SECURITY Bug: unwanted shared files!!!
« Reply #3 on: November 12, 2006, 08:44:23 PM »

Quote
On the other hand, is there a way to share with aMule only fully downloaded files excluding the partially (Temporary) downloaded files?
No, and I doubt there will be.
Logged