> -----Original Message-----
> From: Benjamin Scott [mailto:[EMAIL PROTECTED]]
> Sent: Sunday, November 11, 2001 10:08 PM
> To: Exchange Discussions
> Subject: RE: It's not Microsoft's fault because....
> 
> 
> On Sun, 11 Nov 2001, Chris Scharff wrote:
> > No.. I have customers who utilize scripting technologies in their
> > Exchange forms.
> 
>   Yes, but do those scripts need unrestricted access to the 
> entire local
> system?  Could they not be implemented in a (theoretically) 
> secure sandbox?
 
In some cases, yes, they do. In others, they only need access to one
application. For instance, we use an expense reporting tool that uses your
MAPI profile to email reports from the clients to its server. So, it has
access to your MAPI profile only - it still has access to do exactly what
Melissa and ILOVEYOU did.

Scripting languages are only useful to the extent at which they can access
system resources.


>   Given the choice between script viruses and having to use a 
> different
> interface, I think most companies would choose the different 
> interface.  Do
> you disagree?
> 
> > I have no idea what you're talking about. Seems to me that 
> every useful
> > scripting language is potentially dangerous.
> 
>   True.  However, most scripting languages don't 
> automatically execute when
> emailed to you... :-)

Neither does VBScript. Oh, that's right, I know enough to set my scripting
preferences such that I have to explicitly call the script to execute it. I
guess I was doing my job that day.




> 
> > We keep the pervious threads in place ...
> 
>   I think there is an important difference between 
> "maintaining the thread
> of conversation" and "quoting entire messages verbatim, including
> signatures".  :-)
> 



------------------------------------------------------
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to