tcb said:
'I'm getting nagged for the official okay from you that the DB client
system is secure from rogue viruses copying C: drives."
Any suggestions how to handle this question or what actions to take to
assure security (should that be possible)?
Depends on whether you hand deliver the application or send it to them. If
you hand deliver it, you only need to do the following:
Look at your code. Does any procedure copy the C:\ drive? If not, then scan
the file with your antivirus scanner. The virus definitions don't have to be
up to date. As long as they're newer than November 1999, it will find a
virus if it's embedded in the file. If there's no virus, make a copy of the
file. Now hand deliver the copy and tell them, "There are no viruses, and
there's no chance it will copy your C:\ drive and send it to the Martians."
If you send the file to them, you'll need to sign it first with your digital
signature. When they receive the file and try to open the file with the
Macro Security level set to medium or high, the digital signature will tell
them if the file has been altered in any way. If the file hasn't been
altered and they accept your digital signature as trusted, you can tell them,
"There are no viruses, and there's no chance it will copy your C:\ drive and
send it to the Martians."
For any other client who trusts you not to do harmful things to their
computers just tell them, "Scan it with your antivirus scanner."
