Batters: DH> On Sunday, July 11, 2004 at 4:47:19 PM you wrote:
>> At least the user then has a choice to download from a known >> source, cancel the operation, or choose another URL. DH> Sorry, that does not address the concerns I brought up. `----------[end quote]------------------------ All it does do is place the URL in front of the user prior to D/L. I can make an initial assumption that there is 1 or 2 URLs known by TB and can be considered to be valid, as far as a known location for smilies and Rogopics. Could the individual files be compromised? Of course they can. First, there's the issue of using these eye-candies. Those that want a semi-secure MUA won't want to turn these on. That's step one; to enable or disable them (default to disable?). Secondly, if the user does decide to enable one or both of these, then TB allows the user to perform a semi-automatic D/L by putting the URL in front of his/her face (and maybe a note to warn the user if the URL doesn't match the URL of record for the eye-candy). There is an element of personal responsibility. The only way to keep absolutely safe is "not to play" (from WarGames, 1983). Dennis -- Dennis Hays/Haysdesign License: http://www.haysdesign.com/license 7/11/2004 at 1:48 PM (-5 UTC) The Bat 2.12 RC/3 on Windows 2000 5.0 2195Service Pack 4 ________________________________________________________ Current beta is v2.12 RC/1 | 'Using TBBETA' information: http://www.silverstones.com/thebat/TBUDLInfo.html IMPORTANT: To register as a Beta tester, use this link first - http://www.ritlabs.com/en/partners/testers/

