Toolbox Update For Monday, January 14, 2002
I hope everyone had a great New Year’s. I hate to start off the year on a bad note, but I wanted to alert everyone to a potential problem with Script Sentry and a popular e-mail client. After receiving multiple e-mails claiming that Script Sentry wasn’t working properly with Eudora 5.1. I looked into the situation and e-mailed Eudora to confirm my suspicions. Sure enough, Eudora would launch an attachment using the “Open” command whether or not that was set as the default. As the Eudora tech support rep put it: “Eudora only sends the Open command… and there is no way to redefine it - it is hard coded into the program.” So I’m left with two options. The first is to leave Script Sentry as is and have Eudora users vulnerable whether they’re running Script Sentry or not. The other one is to change Script Sentry to “hijack” the Open command and set up another command (perhaps “Bypass Script Sentry”) to house the normal Open command. Needless to say, I’ve chosen the latter option. Until I get this rewrite finished though, Eudora users should beware. Script Sentry might not be protecting you from malicious scripts due to how Eudora’s authors coded their program. As always, you can make sure you’re protected by Testing Your E-mail Defenses. I’ll send out another update when I have this problem fixed.
