On 8/16/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:


* The end user has to obtain the document from an unknown source.


Why does it have to be from an unknown source?  I mean, does the virus
somehow not work if I get it from my best friend?


* The user has to put that document into a directory which automatically
gives macros permission to run;
* They have to have changed the default security setting to "Low";
* They have to open the document;


oh my.  What are the chances of someone opening a document?


* There platform must contain either _no_ firewall, or one that does not
block any outgoing processes, and also does not block programmes from
opening other programmes;


There are plenty of people running computers with all operating systems with
no firewalls.  Not just Windows.  (Although there are plenty of people out
there with Windows 9x and non-updated pre-SP2 Windows XP running on their
computer and no third-party firewall.  Many Mac people I know don't use
firewalls, either.  Linux people are more likely to have a software or
hardware firewall - or have it built into their distro - but not everyone.
So there's a good chance this requirement will apply to a large enough
number of people as well.


The "Security flaws" that the French DOD is concerned about exist only
when the user changes the defaults.


I only see 2 "defaults" that need to be changed.  The macros running folder,
and the low level security.  I must be a complete idiot, because I have no
idea which folders on my computers will run macros and which ones won't.
And I'm not even exactly sure what you mean by turning the security down to
low.  What security level?  Where?  On OpenOffice.org?  On Linux?  On Mac?
On Windows?  On my hypothetical firewall?  On the folder?

--
- Chad Smith
http://www.gimpshop.net/
http://www.whatisopenoffice.org/
http://www.chadwsmith.com/

Reply via email to