[tex-live] Install file of the TL should have unique name

[Lars Madsen]

Don't you remember the "I love you" virus from the late 90s (I think), it exploited exactly that, came as an attached file called i_love_you.txt.vbs

One of our it guys gave a talk about the virus and the "interesting" ved features that it used

Sent from my Android phone using TouchDown (www.nitrodesk.com)

-----Original Message-----
From: Zdenek Wagner [zdenek.wagner at gmail.com]
Received: torsdag, 09 jan. 2014, 21:20
To: Lars Madsen [daleif at imf.au.dk]
CC: Denis Bitouzé [dbitouze at wanadoo.fr]; tex-live at tug.org [tex-live at tug.org]
Subject: Re: [tex-live] Install file of the TL should have unique name

2014/1/9 Lars Madsen <daleif at imf.au.dk>:
> I agree with Philip, it is a really annoying Win feature.
>
>From my point of view it is even one of the most dangerous
misfeatures. If a user clicks "infectme.txt" assuming to open it in a
notepad and it is in fact "infectme.txt.exe", the user's computer will
be infected. The Windows users should be educated to:

1. configure Windows to display all extensions

2. do not click anything unless (1) is done

3. report this security risk to Microsoft

4. spread this knowledge to other Windows users

> I change it on our users computer whenever they come by.
>
> As far as making the file names unique, I do not think it is possible at the moment due to the manner in which the .bat file calls install-tl
>
> But you should easily be able to tell them apart even without the extensions. Windows would be able to identify .bat files.
>
>
>
> /Lars Madsen
> Institut for Matematik / Department of Mathematics
> Aarhus Universitet / Aarhus University
> Mere info: http://au.dk/daleif@imf / More information: http://au.dk/en/daleif@imf
>
>
> ________________________________________
> From: tex-live [tex-live-bounces at tug.org] on behalf of Denis Bitouzé [dbitouze at wanadoo.fr]
> Sent: 09 January 2014 19:33
> To: tex-live at tug.org
> Subject: [tex-live] Install file of the TL should have unique name
>
> Hi,
>
> in order to install TL 2013 on Windows, I told a student of mine to
> click on the 'install-tl.bat' file in the TL folder. But, as:
>
> 1. by default, Windows hides the files' extensions,
> 2. TL provides 3 'install-tl.*' files,
>
> my student didn't succeed to run the install wizard as he didn't click
> on the right file.
>
> He brought his computer at the university in order I help him but
> I couldn't figure out what was the right file to run. I had to change
> the Windows config in order to make the extensions be displayed, to
> finally detect the .bat file.
>
> Hence, it could be nice that for the install file of the TL to have
> unique name.
>
> Best regards.
> --
> Denis
>
>



--
Zdeněk Wagner
http://hroch486.icpf.cas.cz/wagner/
http://icebearsoft.euweb.cz

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://tug.org/pipermail/tex-live/attachments/20140109/26b42883/attachment.html>