> -----Original Message----- > From: Benjamin Scott [mailto:[EMAIL PROTECTED]] > Sent: Sunday, November 11, 2001 10:08 PM > To: Exchange Discussions > Subject: RE: It's not Microsoft's fault because.... > > > On Sun, 11 Nov 2001, Chris Scharff wrote: > > No.. I have customers who utilize scripting technologies in their > > Exchange forms. > > Yes, but do those scripts need unrestricted access to the > entire local > system? Could they not be implemented in a (theoretically) > secure sandbox? In some cases, yes, they do. In others, they only need access to one application. For instance, we use an expense reporting tool that uses your MAPI profile to email reports from the clients to its server. So, it has access to your MAPI profile only - it still has access to do exactly what Melissa and ILOVEYOU did.
Scripting languages are only useful to the extent at which they can access system resources. > Given the choice between script viruses and having to use a > different > interface, I think most companies would choose the different > interface. Do > you disagree? > > > I have no idea what you're talking about. Seems to me that > every useful > > scripting language is potentially dangerous. > > True. However, most scripting languages don't > automatically execute when > emailed to you... :-) Neither does VBScript. Oh, that's right, I know enough to set my scripting preferences such that I have to explicitly call the script to execute it. I guess I was doing my job that day. > > > We keep the pervious threads in place ... > > I think there is an important difference between > "maintaining the thread > of conversation" and "quoting entire messages verbatim, including > signatures". :-) > ------------------------------------------------------ Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]

