On Thu, 4 May 2000, Jerry Eckert wrote:
> I believe scripts embedded in the message text (as opposed to an attachment)
> should ALWAYS require explicit confirmation before being allowed to perform
> any operation which has effects on any part of the system other than the
> display. There should not be any user option to disable this confirmation.
As an administrator, I'm inclined to agree. As a USER, if there were a
program attached to my mail that I wanted to run, if I have to perform
extra mouse clicks to say Yes, I really do want to run that, I'd be very
irritated. So I guess I'd have to disagree.
However, I DON'T think these things should automatically kick off... you
should have to minimally initiate some action to run it. By default, I
would want my client to come pre-configured to confirm with a nice warning
in big, bold, annoyingly blinking letters that I might be about to trash
my system, to get users to think about not running attachments. I'm
talking screen-sized here people. There should also be some randomly
generated key sequence, which is explained in the dialog, to get it to go
away, to force users to actually read the warning, rather than simply
click on OK.
But ultimately, for people who do know what they're doing, you should be
able to disable that.
My $.02
--
Derek Martin
System Administrator
Mission Critical Linux
[EMAIL PROTECTED]
**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************
