[AccessD] Redemption DLL WAS: Poll: How many versions...

John W. Colby jcolby at colbyconsulting.com
Thu Nov 20 18:20:10 CST 2003


>Not installing a security service pack to stop malicious VBScript code from
propagating viruses IS a big deal.

So in other words, its quite ok to run vbscripts that trash the client,
format hard disks etc. as long as you don't propagate it?  How silly does
that sound?

>Are you advising your clients not to install security patches so your email
code will work?

Turning on SP3 doesn't prevent code (viruses) from running, it causes a
stupid box to pop up IF a mail tries to go out that is caused by code.  BIG
DIFFERENCE.  IOW, it makes NO attempt to stop viruses, it simply attempts to
protect Microsoft's ass from lawsuits when a virus sends email.  As long as
the virus doesn't send email, hey, do whatever you want.

My code is NOT a virus.  I wrote it at the request of my client.  To allow
viruses to run (vb code) but prevent my valid code from mailing out is
simply ludicrous, stupid, silly, and finally, fu*king irritating.

So no, I'm advising my client to run virus checkers to stop viruses (hmmm...
that's even what they're CALLED!), and yes, I'm advising my client not to
install a stupid, silly, ludicrous and finally, fuc*ing irritating POS
service patch that is nothing more than an attempt by Microsoft to protect
THEMSELVES at MY expense.

Uhh... did I make my position clear?

<grin>

John W. Colby
www.ColbyConsulting.com

-----Original Message-----
From: accessd-bounces at databaseadvisors.com
[mailto:accessd-bounces at databaseadvisors.com]On Behalf Of Brett Barabash
Sent: Thursday, November 20, 2003 6:56 PM
To: 'Access Developers discussion and problem solving'
Subject: RE: [AccessD] Redemption DLL WAS: Poll: How many versions...


> What is that "something" that is no big deal?
Copy the DLL to the machine (by convention winnt\system32, but you can put
it anywhere you want) and regsvr32 <DLL Path>.  You can do this from a
command line, or in a batch file (in which case I would use the /s switch
with regsvr32 to supress the confirmation msgbox).
Alternatively, you can use the setup.exe that comes with the Redemption DLL
to install it.
Either way, no big deal.

>I bypassing it by not installing the service pack that turns it on. (A2K)
Not installing a security service pack to stop malicious VBScript code from
propogating viruses IS a big deal.  Are you advising your clients not to
install security patches so your email code will work?


-----Original Message-----
From: John W. Colby [mailto:jcolby at colbyconsulting.com]
Sent: Thursday, November 20, 2003 12:14 PM
To: Access Developers discussion and problem solving
Subject: RE: [AccessD] Redemption DLL WAS: Poll: How many versions...


>What's the big issue with installing a COM component on a user's machine?

The big issue is I don't use an installer, nor a runtime.  Thus I have to do
"something" (unexplained) to get it installed on that machine.  What is that
"something" that is no big deal?

>If you don't use the redemption DLL, how do you bypass the security dialog?

I bypassing it by not installing the service pack that turns it on. (A2K)

John W. Colby
www.ColbyConsulting.com

-----Original Message-----
From: accessd-bounces at databaseadvisors.com
[mailto:accessd-bounces at databaseadvisors.com]On Behalf Of Brett Barabash
Sent: Thursday, November 20, 2003 11:39 AM
To: 'Access Developers discussion and problem solving'
Subject: RE: [AccessD] Redemption DLL WAS: Poll: How many versions...


OK, I give up.
What's the big issue with installing a COM component on a user's machine?

And a better question:
If you don't use the redemption DLL, how do you bypass the security dialog?
Or do you use the line a tech consulting firm recently handed us: "The email
warning dialog is for your protection.  It can't be bypassed"  Uh huh...


-----Original Message-----
From: John W. Colby [mailto:jcolby at colbyconsulting.com]
Sent: Thursday, November 20, 2003 6:05 AM
To: Access Developers discussion and problem solving
Subject: RE: [AccessD] Poll: How many versions of Access are you
runningononemachine? XPosted


Stuart,

The same reason I don't use it.

John W. Colby
www.ColbyConsulting.com

-----Original Message-----
From: accessd-bounces at databaseadvisors.com
[mailto:accessd-bounces at databaseadvisors.com]On Behalf Of Stuart Sanders
Sent: Wednesday, November 19, 2003 11:06 PM
To: 'Access Developers discussion and problem solving'
Subject: RE: [AccessD] Poll: How many versions of Access are you running
ononemachine? XPosted


I have 97, 2000 (SP3) and XP (SP2) on my dev machine.  I use outlook XP
for email currently, but don't use automation.

I had considered giving this a look: http://www.dimastr.com/redemption/

Which supposedly works around the security patch, but is a com component
which needs to be installed on systems.

Stuart



> -----Original Message-----
> From: accessd-bounces at databaseadvisors.com
> [mailto:accessd-bounces at databaseadvisors.com] On Behalf Of John W.
> Colby
> Sent: Thursday, 20 November, 2003 10:23 AM
> To: Access Developers discussion and problem solving
> Subject: RE: [AccessD] Poll: How many versions of Access are you
> running onone machine? XPosted
>
>
> I have Access97 and A2K on one machine, and AXP on another.
>
> I use Outlook automation to send email and the SP3 for Office2K breaks

> outlook automation such that it asks for permission for every email
> sent. SP3 fixed the screwup where XP breaks 2K but I simply can't
> install it on my
> dev machine.  Thus XP on one, 2K on another.  And I am NOT
> happy to have to
> do that!
>
> John W. Colby
> www.ColbyConsulting.com
>

----------------------------------------------------------------------------
----------------------------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed.
If you have received this email in error please notify the
originator of the message. This footer also confirms that this
email message has been scanned for the presence of computer viruses.

Any views expressed in this message are those of the individual
sender, except where the sender specifies and with authority,
states them to be the views of Tappe Construction Co.

Scanning of this message and addition of this footer is performed
by SurfControl E-mail Filter software in conjunction with
virus detection software.

_______________________________________________
AccessD mailing list
AccessD at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/accessd
Website: http://www.databaseadvisors.com



_______________________________________________
AccessD mailing list
AccessD at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/accessd
Website: http://www.databaseadvisors.com

----------------------------------------------------------------------------
----------------------------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed.
If you have received this email in error please notify the
originator of the message. This footer also confirms that this
email message has been scanned for the presence of computer viruses.

Any views expressed in this message are those of the individual
sender, except where the sender specifies and with authority,
states them to be the views of Tappe Construction Co.

Scanning of this message and addition of this footer is performed
by SurfControl E-mail Filter software in conjunction with
virus detection software.

_______________________________________________
AccessD mailing list
AccessD at databaseadvisors.com
http://databaseadvisors.com/mailman/listinfo/accessd
Website: http://www.databaseadvisors.com





More information about the AccessD mailing list