Ok..there’s a lot of talk floating around the Mac news sites, about a ‘flaw’ in Safari and how OSX deals with widgets…

first off… the sample ‘flaw’ is not 100% accurate in what it describes on the page… even if you allow the widget to be installed automatically… you still need to choose to run the widget the first time, and you will get prompted by the OS to ask if you really want to run it..

but.. save yourself the headache (and avoid any possible future exploits like this) go into Safari’s preferences, and uncheck the “open SAFE downloads automatically” option..