🚀 go-pugleaf

"David Mohring" <heretic@localhost.localdomain> wrote in message
news:slrn8lmeh7.636.heretic@localhost.localdomain...
> On Thu, 29 Jun 2000 23:09:00 +1200, Slow
>                <aputto@htomail.com.no.spam> wrote:
> >"David Mohring" <heretic@localhost.localdomain> wrote in message
> >news:slrn8lm9t6.636.heretic@localhost.localdomain...
> >> See
> >> http://news.cnet.com/news/0-1005-200-2167152.html
> >>
> >> Microsoft DOT NET? With the current level of security in Microsoft
> >> Office Applications - NOT NET!
> >>
> >> David Mohring - Grandson of Priam
> >
> >Stop complaining, and offer to help fix it if it worries you so much.
> >
>
> For a solution to script level exploits, check out my posts in
alt.comp.virus
> ( dejanews links )
> http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=633535565&fmt=text
> http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=633960556&fmt=text
> http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=634259957&fmt=text
> http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=634364042&fmt=text
> http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=634383912&fmt=text

Digital certificates for code etc is already implemented in Win32 and IE
etc. There are holes in IE and Netscape that allow use of object that may
already be installed on the users PC.

<snip>

> Just switching to NT will not provide protection to document files that a
> user has write access to OR information in documents that a user has
> read access to. It is possible to create scripts that check access
> permissions before attempting to do so.

On a secure NT workstation, script could check for access permission to the
startup folder or whatever system folder, but if it is set to RO, they
cannot access it!