Ambrosian Scripture

Real-world answers to real-world problems.

March 2004 - Posts

Updated: Look Out for Lookout in Outlook

On the recommendation of a friend, I decided to try Lookout for Outlook.  So far, I've been happy with it.  It indexes your content, providing an extremely fast and simple search utility for Outlook.  I'm not one to create subfolders for every email contact like some, but even I can see how it can (and has) helped me to locate content faster.  So I do recommend it.

However, watch out if you send a bug report using the Help -> Report a Bug... feature.  After freezing Outlook for a couple seconds, it creates a new email with three files attached: log.txt, SupportInfo.xml, and Options.xml.  These files contain sensitive information.  In particular, SupportInfo.xml contains your machine name, user name, and domain.  I just don't see how knowing this could help debug, but I can see how hackers could use it.  Sending that information over the internet is a serious security risk.  The Options.xml file, apart from containing Lookout option information, contains virtually your entire mailbox folder structure, which, while less potentially damaging than the aforementioned items, is still somewhat sensitive, in my estimation.  I can see how this might help debug, but I think that the user should be specifically asked if this is okay to send.

I will give a nod to the fact that the email's body contains instructional text, saying you can remove any attached files, but I do not think that is good enough, as most people will not think twice about clicking send anyway, and those who might probably won't really understand XML or even what the elements contain.

The moral of the story is that you need to modify those files to remove any information that you consider sensitive.  I'm contacting them to suggest they change their reporting practices.  I will update here if they do.

Update - 03/08/2004

Lookout support was very quick in responding to my bug report and very gracious for the time I took to write it up.  They claimed to know where the problem is and hoped to fix it quickly.  They have also assured me that their intent in using email to report bugs is to promote openness and build trust, encouraging users to audit the information being sent.  Finally, they have updated the reporter to not send machine name, username, and domain, which will be in the next release.

Overall, I'm very pleased with the product and the support.  I've been using it since I originally posted.  I'll find myself surfing through folders (old style) and then remember that I can just do a quick search, and every time it works like a charm, very fast and accurate.  I highly recommend this product.

IIS 6 Manager

If you're running Windows Server 2003 on your domain and your workstation is on XP, you need to get Internet Information Services (IIS) 6.0 Manager for Windows XP.  This tool is great!  It updates XP so that you can manage your 2003 Server IIS instances remotely, and you can manage your local instance with the new, fancier GUI.  It's a must-have, especially in a corporate environment.

Asp.Net Blog Topics

The question: Is it unfair to post non-ASP.NET-related items on my weblogs.asp.net blog?

My initial reaction is one of reticence.  This is because I wonder if people would be more bothered by off-topic posts in this venue.  I imagine this concern is warranted because undoubtedly there will be those who are, and I have posted relatively few such posts since I've been blogging for this reason.

However, as I become more familiar with the blogging phenomenon, I find that I subscribe to individual blogs because I am interested in what the blogger has to say, not because he is hosted at weblogs.asp.net or any other host.  In my mind, this indicates that anyone who subscribes to my blog, which, I imagine, is the primary reader base, is doing so because they want to (for whatever reason!) listen to what I have to say. 

Given this consideration, I do not see any significant problem with posting non-ASP.NET-related posts on my blog.  I recognize that there still may be some who are put off by this off-topic-ness, whether they read the posts from the weblogs home page or via my feed; however, I hope that the majority will not be and will in fact appreciate that we are each made up of much more than ASP.NET, that it is good to be reminded that this .NET stuff is not our whole raison d'être, and that it is good to take a break from work and laugh, think, yell and shout, and/or drink a cup of chai.  I for one appreciate that, so I hope you will, too.  And I hope you enjoy and maybe get something out of my mental meanderings.

As a gesture of my good will towards those not interested in my non-.NET scribing, I will preface all such posts in the future with a suitable disclaimer.

To all those who read this and my other posts, please accept my warmest thanks for sharing your time with me.

Posted: Mar 02 2004, 03:34 AM by Ambrose | with 8 comment(s)
Filed under:
More Posts