Solved

How to convey the safety of a .vbs for download, in light of all the potential dangers of today?

Posted on 2007-03-19
4
176 Views
Last Modified: 2010-04-16
What is a practical solution to prevent your perfectly safe .vbs script from triggering warnings.
[Or, at least, make it a little easier to 'swallow']

Thus far I have simply forewarned the user that this is the case. That they will see warnings etc.

But the other day, a new computer with Norton installed, made such a stink about it, it almost frightened me from running the script, and I'm the author!

I know you can purchase license with certain places [Verisign, I think is one] but the script is free and simple, yet useful - but I imagine many are afraid to use it.

I also realize, that if there were 'too easy' an answer to this, it would get abused, but thought I might ask anyway.

Maybe recommendations, and '5 star awards' type things ...

-David
0
Comment
Question by:opraus
4 Comments
 
LVL 67

Accepted Solution

by:
sirbounty earned 125 total points
ID: 18748974
The best defense is a good offense? :)
Not really much you can do to make scripts appear less threatening.  Thanx to all the 'nasty' scripts out there.
I would just say have you scripts availabe for download with a disabled extension like script.txt and request the user rename it to vbs when they're ready to run it.
Also make sure you comment it heavily - what the script's purpose is in the header, and details on different functions within your code.  That way there's no question and the user is at least a bit more comfortable, whether they understand scripting or not, that you've at least taken the time to explain yourself.  Doesn't guarantee that they'll run it, but it puts you in a better position of being responsible enough to add disclaimers...
0
 
LVL 10

Assisted Solution

by:fostejo
fostejo earned 125 total points
ID: 18784906
opraus,

Unfortunately, with scripts automatically falling into the category of 'untrusted' by AV software etc, avoiding the warning messages is practically impossible unless you're willing to rename them to a 'docile' format such as .txt as sirbounty suggests.

To soften the blow for the user, you could perhaps hilight the advantage of distributing a VBscript over other types of download such as a normal executable - at least with a script, you can actually see what's going to run, how it works and, if so inclined, re-use some of the code .. you simply don't get these options with a .exe file etc.

cheers
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It is a general practice to get rid of old user profiles on a computer  in a LAN environment. As I have been working with a company in a LAN environment where users move from one place to some other place at times. This will make many user profil…
This article is the result of a quest to better understand Task Scheduler 2.0 and all the newer objects available in vbscript in this version over  the limited options we had scripting in Task Scheduler 1.0.  As I started my journey of knowledge I f…
Learn the basics of lists in Python. Lists, as their name suggests, are a means for ordering and storing values. : Lists are declared using brackets; for example: t = [1, 2, 3]: Lists may contain a mix of data types; for example: t = ['string', 1, T…
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now