FAQ Maintainers Mailing List
Re: [faq-maintainers] Re: faq-maintainers-digest V1 #143

---------

From: Jose Pina Coelho (bofh@clix.pt)
Date: Sun Dec 02 2001 - 09:40:45 CST


Jonadab the Unsightly One wrote:
> The only feature I know about that Outlook
> has and Pegasus lacks is the ability to talk
> to Microsoft's mail servers when they are
> configured to disallow the standard mail
> protocols.
It's not a bug. It's a feature :-)

> Almost every mail client is immune to such
> things. The Outlook family are AFAIK the only
> mail clients that are vulnerable OOTB. Netscape
> Messenger has an option so it can be configured
> to allow Javascript in mail and news, which
> presumably makes it vulnerable, at least in
> theory, but this is not the default state, so
> it is less likely to be targeted than Outlook.
For those that haven't noticed:
Go to Edit->Preferences->Advanced
and uncheck "Enable JavaScript for Mail and News"

IIRC, it's enabled by default (yes, it's stupid).

> Summary: don't use Outlook, or if you do,
> pay attention to security advisories, patches,
> and so on.
Go to http://windowsupdate.microsoft.com/
and load each and every security update, also install critical
update notification (if you haven't already done so).

-- 
Doing AIX support was the most monty-pythonesque
activity available at the time.

************************************************************* To unsubscribe send a message to majordomo@faqs.org as

unsubscribe faq-maintainers fill-in-your-email-address-here *************************************************************



[ FAQ Archive | Search FAQ Mail Archive | Authors | Usenet References ]
[ 1993 | 1994 | 1995 | 1996 | 1997 | 1998 | 1999 | 2000
]

---------

faq-admin@faqs.org

© Copyright The Internet FAQ Consortium, 1997-2000
All rights reserved