[opensource-dev] FAQ posted for Third Party Viewer Policy

[Maggie Leber (sl: Maggie Darwin)]

On Sun, Feb 28, 2010 at 10:49 PM, Tigro Spottystripes
<tigrospottystripes at gmail.com> wrote:
> hm, i didn't thought he did collect IP addresses, but even if the system
> does catch IP addresses (which isn't such a big deal if you keep your
> machine safe) an IP address wouldn't be of any help identifying
> malicious clients, unless the malicious clients in question routed stuff
> thru a known proxy.

Sounds to me like we're talking about a lot more than IP address.
There have been both remote file system reading and arbitrary code
execution vulnerabilities in Quicktime in the past.