Originally Posted by aidanjt Why should a scripting engine be embeded in an E-Mail client period? An E-Mail client is designed to fetch/send mail, organise the incoming mail, and allow the user to read the contents of an E-Mail.. Even if the marbles in your head rattle around and you somehow manage to justify a practical use of a scripting engine in an E-Mail client, you could never justify giving the engine write access to either E-Mail clients or Browsers.
I'm getting more synical as I get older :/
I was thinking more along the lines of dodgy attachments etc. The point that i was trying to make is that there are other ways for viruses etc to get on your system than a straight Hack.
There are people in the world that if they find a disk in the street with "the worlds best pron and Elvis's long lost unreleased album" may well slap it in a drive without any thoughts as to what nasty's may be on it. I don't think that you can hold MS accountable for that, or the fact that they would like some of the money spent on programmes that can scan said disk and tell you that its got a trojan/multimillion selling LP on it.
Don't get me wrong, MS have left some massive holes in their programmes, and I am also suspicious as to how hard they will try to patch if they can get a subscription fee to cover mistakes instead. Mind you, they don't try particularly hard now, so what harm can it do