Author: Jason Williamson
Date: 01:10:25 05/06/00
Go up one level in this thread
On May 06, 2000 at 02:21:09, Frederic Friedel wrote: >On May 06, 2000 at 01:30:47, Anthony Boynes wrote: > >>vbs files can also be activated by running cscript.exe > >Thanks! I've added that to my intructions. You need two and a half minutes to >set up protection now. > >Christophe Theron reminds me that you can send a simple .BAT file that will >delete all the files on your hard disk with no warning message. But I think >people are aware that exe and bat files must not be started, virus programs and >firewalls immediately start throwing fits if you try. But the Scripting Host >(which indeed is installed with IE5) was largly ignored in protection schemes, >which is why the ILY virus could get onto more than 10 million computers in 48 >hours (according to CBS). > >My feeling is: an operating system and a mailer can allow mail attachments to >run, to show text, display pictures, play a tune, and maybe a few other normal >things. But fiddling around with the Windows registry, deleting a thousand >files, generate and sending out a thousand emails, and in fact doing all of this >on other network computers as well, all this must be made a complete no-no for a >lowly email attachment. Really the problem here isn't the .vbs files per say, but rather the assumption windows makes that their consumer base is a bunch of retards and thus can't handle file extensions. By hiding these extensions, there are many ways to mess with people that are not careful. The advice you critized, "Never open attachments" is quite good really. If you get an unsolicted attachement, you SHOULDN'T open it. That would elminate the need of disababling the vsb support in windows. But then again, it would also assume that the general user base (the 10,000,000 computers that got infected by the Iloveyou) are NOT retarded...hmmm maybe windows is sorta right there.... :) In any event, you fix is more of a hack then anything, and is a temporary measure at best, and a possible problem in the future at worst if Windows decides it needs the .vbs support. Jason
This page took 0 seconds to execute
Last modified: Thu, 15 Apr 21 08:11:13 -0700
Current Computer Chess Club Forums at Talkchess. This site by Sean Mintz.