quote:
Originally posted by Spunky
quote:
Originally posted by kabso 5
At least allow links that contain youtube.com google.com
http://mydomain.com/youtube.com/virus.exe
Can be too easily exploited.
As I said, even if you accept a file transfer without thinking, you still need to open it. You usually also need to confirm a message box that appears with EXE files downloaded from other people or websites. Then your antivirus might make objections about the file when you try to run it.
Most importantly, bots and scripts cannot initiate file transfers, meaning the file HAS to be coming from your contact. If it's a virus, they obviously don't like you very much, or don't know about it themselves. Links can be sent by any script that can send messages over the MSN protocol.
From MS side, not client side! Do you really believe that people who see such security popups all the time (poor vista users) actually pay attention to them and not automatically clicking accept? really??? When you see someone sends you a file do you go on 10 minutes discussion about the file before you decide to accept and what do you do when you receive it? going through virustotal.com to make sure it's clean? - I doubt it. This argument is so weak...
And besides, since we already established that the links generated on MS server side, your example of spoof would not work, because program that parses the link would see that it's not youtube. So allowing common/safe websites pass through is a simple solution and would not rise up hell as current solution.
P.S.
several times I've received invalid youtube links since this nonsense started because MS replaced some characters in the url with * - now, this is unacceptable BS!
[EDIT]
Just noticed your script, thank you it is better then nothing. Will test it later though.
Here is another idea for these who's willing to help: A float window (or attached to the chat windows, or accessible via hotkey, whatever) that would show list of links from conversation. I see it as if it would only scan incoming messages and add links to it's own array as more become available. It could be individual list per conversation or one list with identifications from whom a link received.
