Solved

How to convey the safety of a .vbs for download, in light of all the potential dangers of today?

Posted on 2007-03-19
4
175 Views
Last Modified: 2010-04-16
What is a practical solution to prevent your perfectly safe .vbs script from triggering warnings.
[Or, at least, make it a little easier to 'swallow']

Thus far I have simply forewarned the user that this is the case. That they will see warnings etc.

But the other day, a new computer with Norton installed, made such a stink about it, it almost frightened me from running the script, and I'm the author!

I know you can purchase license with certain places [Verisign, I think is one] but the script is free and simple, yet useful - but I imagine many are afraid to use it.

I also realize, that if there were 'too easy' an answer to this, it would get abused, but thought I might ask anyway.

Maybe recommendations, and '5 star awards' type things ...

-David
0
Comment
Question by:opraus
4 Comments
 
LVL 67

Accepted Solution

by:
sirbounty earned 125 total points
ID: 18748974
The best defense is a good offense? :)
Not really much you can do to make scripts appear less threatening.  Thanx to all the 'nasty' scripts out there.
I would just say have you scripts availabe for download with a disabled extension like script.txt and request the user rename it to vbs when they're ready to run it.
Also make sure you comment it heavily - what the script's purpose is in the header, and details on different functions within your code.  That way there's no question and the user is at least a bit more comfortable, whether they understand scripting or not, that you've at least taken the time to explain yourself.  Doesn't guarantee that they'll run it, but it puts you in a better position of being responsible enough to add disclaimers...
0
 
LVL 10

Assisted Solution

by:fostejo
fostejo earned 125 total points
ID: 18784906
opraus,

Unfortunately, with scripts automatically falling into the category of 'untrusted' by AV software etc, avoiding the warning messages is practically impossible unless you're willing to rename them to a 'docile' format such as .txt as sirbounty suggests.

To soften the blow for the user, you could perhaps hilight the advantage of distributing a VBscript over other types of download such as a normal executable - at least with a script, you can actually see what's going to run, how it works and, if so inclined, re-use some of the code .. you simply don't get these options with a .exe file etc.

cheers
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

This article is meant to give a basic understanding of how to use R Sweave as a way to merge LaTeX and R code seamlessly into one presentable document.
This article will show, step by step, how to integrate R code into a R Sweave document
Learn the basics of lists in Python. Lists, as their name suggests, are a means for ordering and storing values. : Lists are declared using brackets; for example: t = [1, 2, 3]: Lists may contain a mix of data types; for example: t = ['string', 1, T…
In this fifth video of the Xpdf series, we discuss and demonstrate the PDFdetach utility, which is able to list and, more importantly, extract attachments that are embedded in PDF files. It does this via a command line interface, making it suitable …

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now