{"action":"created","issue":{"url":"https://api.github.com/repos/bitcoin-solutions/multibit-hd/issues/572","labels_url":"https://api.github.com/repos/bitcoin-solutions/multibit-hd/issues/572/labels{/name}","comments_url":"https://api.github.com/repos/bitcoin-solutions/multibit-hd/issues/572/comments","events_url":"https://api.github.com/repos/bitcoin-solutions/multibit-hd/issues/572/events","html_url":"https://github.com/bitcoin-solutions/multibit-hd/issues/572","id":80127963,"number":572,"title":"Check world/ group access of exe on Mac","user":{"login":"jim618","id":919427,"avatar_url":"https://avatars.githubusercontent.com/u/919427?v=3","gravatar_id":"","url":"https://api.github.com/users/jim618","html_url":"https://github.com/jim618","followers_url":"https://api.github.com/users/jim618/followers","following_url":"https://api.github.com/users/jim618/following{/other_user}","gists_url":"https://api.github.com/users/jim618/gists{/gist_id}","starred_url":"https://api.github.com/users/jim618/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jim618/subscriptions","organizations_url":"https://api.github.com/users/jim618/orgs","repos_url":"https://api.github.com/users/jim618/repos","events_url":"https://api.github.com/users/jim618/events{/privacy}","received_events_url":"https://api.github.com/users/jim618/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/bitcoin-solutions/multibit-hd/labels/awaiting%20review","name":"awaiting review","color":"fbca04"}],"state":"closed","locked":false,"assignee":{"login":"jim618","id":919427,"avatar_url":"https://avatars.githubusercontent.com/u/919427?v=3","gravatar_id":"","url":"https://api.github.com/users/jim618","html_url":"https://github.com/jim618","followers_url":"https://api.github.com/users/jim618/followers","following_url":"https://api.github.com/users/jim618/following{/other_user}","gists_url":"https://api.github.com/users/jim618/gists{/gist_id}","starred_url":"https://api.github.com/users/jim618/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jim618/subscriptions","organizations_url":"https://api.github.com/users/jim618/orgs","repos_url":"https://api.github.com/users/jim618/repos","events_url":"https://api.github.com/users/jim618/events{/privacy}","received_events_url":"https://api.github.com/users/jim618/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/bitcoin-solutions/multibit-hd/milestones/15","html_url":"https://github.com/bitcoin-solutions/multibit-hd/milestones/Release%200.1.1","labels_url":"https://api.github.com/repos/bitcoin-solutions/multibit-hd/milestones/15/labels","id":1164648,"number":15,"title":"Release 0.1.1","description":"Tidying up after general release to full audience","creator":{"login":"gary-rowe","id":342133,"avatar_url":"https://avatars.githubusercontent.com/u/342133?v=3","gravatar_id":"","url":"https://api.github.com/users/gary-rowe","html_url":"https://github.com/gary-rowe","followers_url":"https://api.github.com/users/gary-rowe/followers","following_url":"https://api.github.com/users/gary-rowe/following{/other_user}","gists_url":"https://api.github.com/users/gary-rowe/gists{/gist_id}","starred_url":"https://api.github.com/users/gary-rowe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gary-rowe/subscriptions","organizations_url":"https://api.github.com/users/gary-rowe/orgs","repos_url":"https://api.github.com/users/gary-rowe/repos","events_url":"https://api.github.com/users/gary-rowe/events{/privacy}","received_events_url":"https://api.github.com/users/gary-rowe/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":11,"state":"open","created_at":"2015-06-15T10:25:12Z","updated_at":"2015-06-26T11:56:29Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2015-05-24T11:04:34Z","updated_at":"2015-06-26T11:56:29Z","closed_at":"2015-06-26T11:56:29Z","body":"Raised in the MultiBit issues db but might also apply to MBHD:\r\n\r\nJust installed latest version for OS X (from https://multibit.org/releases/multibit-0.5.18/multibit-0.5.18.dmg). Permissions on the executable in the .app bundle include world and group write permissions. Seems this could provide an injection point for malware.\r\n\r\n-rwxrwxrwx@ 1 sysadmin  admin    72K Apr 28  2014 MultiBit.app/Contents/MacOS/JavaApplicationStub*\r\nSeems to me -rwxr-xr-x would be a more secure choice. Can/should this be changed?\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/bitcoin-solutions/multibit-hd/issues/comments/115655413","html_url":"https://github.com/bitcoin-solutions/multibit-hd/issues/572#issuecomment-115655413","issue_url":"https://api.github.com/repos/bitcoin-solutions/multibit-hd/issues/572","id":115655413,"user":{"login":"gary-rowe","id":342133,"avatar_url":"https://avatars.githubusercontent.com/u/342133?v=3","gravatar_id":"","url":"https://api.github.com/users/gary-rowe","html_url":"https://github.com/gary-rowe","followers_url":"https://api.github.com/users/gary-rowe/followers","following_url":"https://api.github.com/users/gary-rowe/following{/other_user}","gists_url":"https://api.github.com/users/gary-rowe/gists{/gist_id}","starred_url":"https://api.github.com/users/gary-rowe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gary-rowe/subscriptions","organizations_url":"https://api.github.com/users/gary-rowe/orgs","repos_url":"https://api.github.com/users/gary-rowe/repos","events_url":"https://api.github.com/users/gary-rowe/events{/privacy}","received_events_url":"https://api.github.com/users/gary-rowe/received_events","type":"User","site_admin":false},"created_at":"2015-06-26T11:56:29Z","updated_at":"2015-06-26T11:56:29Z","body":"Checked this a few nights ago so we're good to go.\r\n\r\nClosing."}}