{"action":"closed","issue":{"url":"https://api.github.com/repos/bitcoin-solutions/multibit/issues/694","labels_url":"https://api.github.com/repos/bitcoin-solutions/multibit/issues/694/labels{/name}","comments_url":"https://api.github.com/repos/bitcoin-solutions/multibit/issues/694/comments","events_url":"https://api.github.com/repos/bitcoin-solutions/multibit/issues/694/events","html_url":"https://github.com/bitcoin-solutions/multibit/issues/694","id":79922039,"number":694,"title":"World-writable executable in MultiBit.app (Mac OS X)","user":{"login":"ChristopherJSanborn","id":12576306,"avatar_url":"https://avatars.githubusercontent.com/u/12576306?v=3","gravatar_id":"","url":"https://api.github.com/users/ChristopherJSanborn","html_url":"https://github.com/ChristopherJSanborn","followers_url":"https://api.github.com/users/ChristopherJSanborn/followers","following_url":"https://api.github.com/users/ChristopherJSanborn/following{/other_user}","gists_url":"https://api.github.com/users/ChristopherJSanborn/gists{/gist_id}","starred_url":"https://api.github.com/users/ChristopherJSanborn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ChristopherJSanborn/subscriptions","organizations_url":"https://api.github.com/users/ChristopherJSanborn/orgs","repos_url":"https://api.github.com/users/ChristopherJSanborn/repos","events_url":"https://api.github.com/users/ChristopherJSanborn/events{/privacy}","received_events_url":"https://api.github.com/users/ChristopherJSanborn/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/bitcoin-solutions/multibit/labels/awaiting%20review","name":"awaiting review","color":"fbca04"}],"state":"closed","locked":false,"assignee":{"login":"jim618","id":919427,"avatar_url":"https://avatars.githubusercontent.com/u/919427?v=3","gravatar_id":"","url":"https://api.github.com/users/jim618","html_url":"https://github.com/jim618","followers_url":"https://api.github.com/users/jim618/followers","following_url":"https://api.github.com/users/jim618/following{/other_user}","gists_url":"https://api.github.com/users/jim618/gists{/gist_id}","starred_url":"https://api.github.com/users/jim618/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jim618/subscriptions","organizations_url":"https://api.github.com/users/jim618/orgs","repos_url":"https://api.github.com/users/jim618/repos","events_url":"https://api.github.com/users/jim618/events{/privacy}","received_events_url":"https://api.github.com/users/jim618/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/bitcoin-solutions/multibit/milestones/6","html_url":"https://github.com/bitcoin-solutions/multibit/milestones/0.5.19%20Release","labels_url":"https://api.github.com/repos/bitcoin-solutions/multibit/milestones/6/labels","id":871158,"number":6,"title":"0.5.19 Release","description":"Upcoming release to cover:\r\n\r\n* Bitcoinj upgrade\r\n* checkpoints file upgrade\r\n* various essential security and performance improvements","creator":{"login":"gary-rowe","id":342133,"avatar_url":"https://avatars.githubusercontent.com/u/342133?v=3","gravatar_id":"","url":"https://api.github.com/users/gary-rowe","html_url":"https://github.com/gary-rowe","followers_url":"https://api.github.com/users/gary-rowe/followers","following_url":"https://api.github.com/users/gary-rowe/following{/other_user}","gists_url":"https://api.github.com/users/gary-rowe/gists{/gist_id}","starred_url":"https://api.github.com/users/gary-rowe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gary-rowe/subscriptions","organizations_url":"https://api.github.com/users/gary-rowe/orgs","repos_url":"https://api.github.com/users/gary-rowe/repos","events_url":"https://api.github.com/users/gary-rowe/events{/privacy}","received_events_url":"https://api.github.com/users/gary-rowe/received_events","type":"User","site_admin":false},"open_issues":7,"closed_issues":5,"state":"open","created_at":"2014-11-18T13:48:27Z","updated_at":"2015-07-27T19:42:10Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2015-05-23T18:37:56Z","updated_at":"2015-07-27T19:42:10Z","closed_at":"2015-07-27T19:42:10Z","body":"Just installed latest version for OS X (from https://multibit.org/releases/multibit-0.5.18/multibit-0.5.18.dmg).  Permissions on the executable in the .app bundle include world and group write permissions.  Seems this could provide an injection point for malware.\r\n```\r\n-rwxrwxrwx@ 1 sysadmin  admin    72K Apr 28  2014 MultiBit.app/Contents/MacOS/JavaApplicationStub*\r\n````\r\nSeems to me `-rwxr-xr-x` would be a more secure choice.  Can/should this be changed?\r\n"}}