Bill Sconce wrote:

> Mr. Culp also says this (CNET 5/5/00):
>   This is by-design behavior, not a security vulnerability.
>
So by-design, they have a security vulnerability.  Thanks for the
admission.  Lawyers, start your engines.
 
>   http://news.cnet.com/news/0-1005-200-1820959.html
> 

> So what on earth is Microsoft doing allowing attachments to run code
> in a full-blown scripting language that can, among many other things,
> invisibly send e-mail?  Says the "Microsoft representative",
> 
>   We include scripting technologies because our customers ask us to
>   put them there, and they allow the development of business-critical
>   productivity applications that millions of our customers use.
> 
Microsoft - name me 5 customers who requested this (outlook running
VBScript without sandboxing).

jeff 
------------------------------------------------------------------------
Jeffry Smith       Technical Sales Consultant     Mission Critical
Linux
[EMAIL PROTECTED] phone:978.446.9166,x271 fax:
978.446.9470
------------------------------------------------------------------------
Thought for today:  The explanation requiring the fewest assumptions
is the most likely to be correct.
                -- William of Occam

**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************

Reply via email to