Take the 2-minute tour ×
Mathematica Stack Exchange is a question and answer site for users of Mathematica. It's 100% free, no registration required.

Apologies if this is overly paranoid.

I recently discovered the Wolfram Demonstrations Project and intend to play with them to understand some of the power of Mathematica.

I have one slight concern: given that Mathematica has all types of system access, what guarantees do I have about these demonstrations (i.e. that they don't maliciously modify my file system, steal ssh keys, install trojans, etc ... )

I would prefer an answer of the form: "option XYZ lets you disable all of that for specific notebooks" rather than an answer of the form "everyone loves each other and would never do that!"

share|improve this question
1  
Well, the source code is there for you to see :) If you still doubt it, don't run it. Same goes for any software/program. I don't see how/why Mathematica programs/demonstration CDFs are special in any way... –  rm -rf Jul 16 '12 at 0:55
3  
1  
@term-rewritica CDF is "sandboxed" in the sense that it can't include functions that access your system. Of course it's always possible that there's a bug, and someone put enough work into exploiting it ... but it's unlikely, especially considering that demonstrations are reviewed by people before they are published. –  Szabolcs Jul 16 '12 at 7:13
2  
R.M. is on target. There is actually a black list of disallowed functions for material that appears on the Demonstrations site. These include things that might change the state of your Mathematica session, or mess with your OS. –  Daniel Lichtblau Jul 16 '12 at 17:46
1  
@DanielLichtblau Is there any chance/need/advantage of such a filter being integrated into Mathematica to check arbitrary CDFs or notebooks for such content (besides the usual dynamic content warning)? –  Yves Klett Jul 17 '12 at 7:54
show 4 more comments

1 Answer 1

up vote 2 down vote accepted

All the demonstrations uploaded to the Wolfram Demonstrations Project (WDP) are CDF documents, which you can open with the CDF player or Player Pro or Mathematica. The CDF player (which is what you open it in, by default) has a set of restrictions. Specifically, you cannot

  • Create new documents/files or save files
  • Change or save the state of the kernel/front end
  • Evaluate or edit input cells

So the possibility of anything being done to your system with a CDF player is minimal. If you're using Mathematica, the program is free to do all of the above (standard warnings for dynamic content still apply).

In addition, Daniel Lichtblau confirms that there is a blacklist of disallowed functions for all submissions that end up on the WDP. These include things that can change the state of your Mathematica session or mess with your OS.

To summarize, I believe it should be safe for you to interact with the demonstration in your browser before downloading.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.