[
Lists Home |
Date Index |
Thread Index
]
if a popular browser / email client believed mime types instead of
making up it's own mind, security would be a lot easier.
very annoying to tell these things that the mime type is x, but it's own
examination of the file tells it it's y, and then treats it as y, not x.
no wonder it's easy to write viruses. leaving aside bizarre concept that
a mail client could run a program just because i open the email....
i like saving things and running them, or at least having to click on
the attachments before they run - although with my administrator hat on
that frightens me - some things should just be hard to do
rick
On Thu, 2004-02-05 at 08:15, Alaric B Snell wrote:
> Dare Obasanjo wrote:
> > Short of creating a mail client and server that prevented people from
> > receiving mail attachments, how would you solve the problem exploited
> > by this current virus on any one of the popular operating systems
> > existing today?
>
> On many UNIX systems, just mount /home as not allowing execution, so
> people need root priveleges to install software, and non-installed
> software can't be run.
>
> UNIX systems don't really have this concept of an executable file
> sitting there waiting to be clicked on, anyway - things generally need
> to be in your path to get executed to begin with. If I got sent an
> executable file as an attachment, I'd need to save it to my home
> directory then open up a shell window and explicitly invoke it, with a
> "./" prefix to override the path and execute a file from the current
> directory.
>
> ABS
>
>
> -----------------------------------------------------------------
> The xml-dev list is sponsored by XML.org <http://www.xml.org>, an
> initiative of OASIS <http://www.oasis-open.org>
>
> The list archives are at http://lists.xml.org/archives/xml-dev/
>
> To subscribe or unsubscribe from this list use the subscription
> manager: <http://lists.xml.org/ob/adm.pl>
>
|
