> -----Original Message-----
> From: Benjamin Scott [mailto:[EMAIL PROTECTED]]
> Sent: Monday, November 12, 2001 8:26 AM
> To: Exchange Discussions
> Subject: RE: It's not Microsoft's fault because....
> 
> 
>   The issue is not scripting per se, but the fact that MS 
> Outlook and MSIE
> have a long history of just running whatever the other guy 
> sends to you,
> without regard for the fact that it may be harmful to your computer.

Easily fixed through proper configuration.

> 
> > Do you think Microsoft pulls these features out of their 
> nether regions?
> 
>   How else do you explain that damn paperclip?  ;-)

I concede on that one - but only that one.

> 
> > So, you're not aware of the fact that with about 30 seconds worth of
> > work (literally), you could write a script that would alleviate all
> > these scripting vulnerabilities on all your machines?
> 
>   Why should *I* have to clean up after *Microsoft's* 
> mistakes?  I paid good
> money for their software; it is unreasonable to expect it to 
> be secure in
> the default configuration?

Because its your job? You want a secure default install, OpenBSD is
available from http://www.openbsd.org. There are NO other Open Systems OSs
that I know of that are truly secure out of the box. Even OpenBSD isn't
completely secure out of the box, but its closer (by leaps and bounds) than
any other.

> 
> > Again, the onus here rests on the Administrator ...
> 
>   What about the millions of home users who don't know even 
> know how to
> spell VBS?

I don't have this issue at home... The problem here is that companies looked
and said "Hey - I can save $150/seat" buying Win9x rather than NT
Workstation for my x number of machines. WOW - look at how much money I
saved. Hey Microsoft, why can't this half priced OS do these things??"
Again, customers drive business.

>   The estimates I hear state that viruses and worms due to 
> poor design on
> Microsoft's part cost billions of dollars per year.  Don't you think
> billions of dollars is a bit much?

Most of those estimates are complete fabrications based on "lost
productivity", etc. Then again, I also practice sane management of email not
only at work but home. I've used email a lot longer than I've administered
networks (going on 20 years of email use, frankly) and common sense has
prevailed through all of it. I guess that's too much to ask of most people
though.

Roger
------------------------------------------------------
Roger D. Seielstad - MCSE MCT
Senior Systems Administrator
Peregrine Systems
Atlanta, GA
http://www.peregrine.com

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to