473,320 Members | 1,821 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

A real challenge to web gurus!?

Everyone on the web is shy on speaking about executing exe's on clients or running install program on the client which is stored on the server.

I believe The Web is the place to share our experience and knowledge.

TVM
RAJ.
Jul 19 '05 #1
10 1278

"krisrajz" <an*******@discussions.microsoft.com> wrote in message
news:AD**********************************@microsof t.com...
Everyone on the web is shy on speaking about executing exe's on clients or

running install program on the client which is stored on the server.

Or it's something you can't do, and shouldn't be able to do, for security
reasons.
Jul 19 '05 #2
> I believe The Web is the place to share our experience and knowledge.

And you can only do so through an EXE?

There are many good reasons why security policies prevent users from
inadvertently running EXEs from untrusted sources (such as a web page).
This is not the forum to explore those reasons, nor is it a place to try to
convince us to lower our guard and trust any EXE we find ... from anyone who
can put a web page on the Internet.
Jul 19 '05 #3
I've been programming the web for the past serveral years, I know the security related issues (such as virus vulnerability etc.,)

I do not know why you guys feel shy on speaking on this subject. If I'm wrong you could've directed me to reach out the solution

The exe file is digitially signed and attached a digital certificate using MS-Authenticode Technology (is this not just enough to ensure that the contents comes from trusted developer?)
If it is not exe what else it could be

Our web server is tightly secured and only internal people of my company is allowed to use the service.

please try out this url
http://www.macromedia.com/shockwave/...=ShockwaveFlas

This is what I want

Since we highly rely on MS-Products I've posted the thread here (tell me where to post this thread). I'm sorry for cross-posting (if so)

T
RA
Jul 19 '05 #4
Even if the .exe is signed, it still relies on trusting the developer.
However, the developer could do something malicious, since any .exe will
execute with the full permissions of the calling user. On the other hand,
most other things are hosted in the browser sandbox, with limited
privileges.

You certain can ask users to download and install your .exe, but unless you
are a well known corporation, with a reputation to protect (like Microsoft,
or Macromedia), a lot of users will steer clear of your application.

Cheers
Ken

"krisrajz" <an*******@discussions.microsoft.com> wrote in message
news:8E**********************************@microsof t.com...
: I've been programming the web for the past serveral years, I know the
security related issues (such as virus vulnerability etc.,).
:
: I do not know why you guys feel shy on speaking on this subject. If I'm
wrong you could've directed me to reach out the solution.
:
: The exe file is digitially signed and attached a digital certificate using
MS-Authenticode Technology (is this not just enough to ensure that the
contents comes from trusted developer?).
: If it is not exe what else it could be?
:
: Our web server is tightly secured and only internal people of my company
is allowed to use the service.
:
: please try out this url:
:
http://www.macromedia.com/shockwave/...ShockwaveFlash
:
: This is what I want.
:
: Since we highly rely on MS-Products I've posted the thread here (tell me
where to post this thread). I'm sorry for cross-posting (if so).
:
: TY
: RAJ
:
:
:
Jul 19 '05 #5
My objective is not to let the clients to download the program instead to intall it directly over the web
If installation through exe is not possible(really?) then what is the alternative? I've seen may web sites provides this facility

Any workarounds

TI
RAJ
Jul 19 '05 #6

Why not use an signed ActiveX control, that installs from a CAB file,
at most the user will only have to click an agreement once to install the
ActiveX components, and that's it

this is for instance how the MS webbased update service works

"krisrajz" <an*******@discussions.microsoft.com> wrote in message
news:0F**********************************@microsof t.com...
My objective is not to let the clients to download the program instead to intall it directly over the web. If installation through exe is not possible(really?) then what is the alternative? I've seen may web sites provides this facility.
Any workarounds?

TIA
RAJ

Jul 19 '05 #7
On Mon, 22 Mar 2004 21:51:05 -0800, "krisrajz"
<an*******@discussions.microsoft.com> wrote:
Everyone on the web is shy on speaking about executing exe's on clients or running install program on the client which is stored on the server.
Shy? We answer the questions asked, was there more you wanted?
I believe The Web is the place to share our experience and knowledge.


As well as reports about the latest location of Elvis. :)

Jeff
Jul 19 '05 #8
On Tue, 23 Mar 2004 03:31:07 -0800, "krisrajz"
<an*******@discussions.microsoft.com> wrote:
My objective is not to let the clients to download the program instead to intall it directly over the web.
If installation through exe is not possible(really?) then what is the alternative? I've seen may web sites provides this facility. Any workarounds?


There are a lot of ways to do this. Components, providing a MIME
type, etc. But you also may need to change the client behavior since
most clients now will refuse to run from the web or at least prompt.
Otherwise, I could force you to download my virus simply by you
visiting my web site. You could use an ActiveX component to do this
if the client accepts ActiveX, though most won't or again will at
least prompt.

Jeff
Jul 19 '05 #9
That is also what the macromedia page that RAJ is referencing does. The best
place to ask about it would be on an ActiveX component newsgroup.

--
Mark Schupp
Head of Development
Integrity eLearning
www.ielearning.com
"J. Baute" <WU**********@spammotel.com> wrote in message
news:40*********************@news.skynet.be...

Why not use an signed ActiveX control, that installs from a CAB file,
at most the user will only have to click an agreement once to install the
ActiveX components, and that's it

this is for instance how the MS webbased update service works

"krisrajz" <an*******@discussions.microsoft.com> wrote in message
news:0F**********************************@microsof t.com...
My objective is not to let the clients to download the program instead
to intall it directly over the web.
If installation through exe is not possible(really?) then what is the

alternative? I've seen may web sites provides this facility.

Any workarounds?

TIA
RAJ


Jul 19 '05 #10
Anyone who is facing the same problem try out these MS-KB articles:
264570, 232077, 167158, 271451

And the followin URL:
http://msdn.microsoft.com/library
Component Development
ActiveX Controls
SDK Documentation
Security Considerations: ActiveX
Overviews / Tutorials

MS technologists please check out whether I'm right.

HTW
RAJ.
Jul 19 '05 #11

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

3
by: Brian Murphy | last post by:
<?php /* A challenge to every PHP programmer.The one who's gonna solve this problem would be deemed as PSP(PHP Supreme Programmer).The problem is this : You have to write a script that...
2
by: Ken | last post by:
This is a challenge. Perhaps someone can offer suggestions. I am trying to create a variable, ordernumber, that increases by an increment of 1 every time the variable is accessed. For...
8
by: Frank Buss | last post by:
A new challenge: http://www.frank-buss.de/marsrescue/index.html Have fun! Now you can win real prices. -- Frank Buß, fb@frank-buss.de http://www.frank-buss.de, http://www.it4-systems.de
30
by: Raymond Hettinger | last post by:
Proposal -------- I am gathering data to evaluate a request for an alternate version of itertools.izip() with a None fill-in feature like that for the built-in map() function: >>> map(None,...
0
by: Richard Jones | last post by:
The date for the second PyWeek challenge has been set: Sunday 26th March to Sunday 2nd April (00:00UTC to 00:00UTC). The PyWeek challenge invites entrants to write a game in one week from...
0
by: richard | last post by:
The date for the second PyWeek challenge has been set: Sunday 26th March to Sunday 2nd April (00:00UTC to 00:00UTC). The PyWeek challenge invites entrants to write a game in one week from...
3
by: Rex | last post by:
Hi - I have been looking for a solution to a particular User Interface challenge for a long time. I have not posted this question here previously - and I am now wondering if anyone can offer me...
2
by: Deven Oza | last post by:
Here is a real challenge! Can you help me , your fellow mate? Deven has written the SQL program, shown in Figure 2, which follows. I intends to compute the total tuition of a class of students...
16
by: DirtyHarry | last post by:
Good day everyone. This sounds like a stupid question, but I became just curious yesterday, and I looked up several textbooks. However, no textbooks on computer language (that I have ) mentioned...
2
by: donovan | last post by:
OK, so I know that there has been a lot of discussion on this topic, but none of the answers have been satisfactory. Therefore there seems to be only one thing to do: issue a challenge to all of...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
0
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.