From: Mike N. 

On Sun, 13 Jun 2004 00:46:13 -0400, "Geo."  wrote:

> I set scripting to prompt and most of the
>other stuff to off in the internet zone.

  There's at least one type of 'prompt' that doesn't fully protect the
user.   For example, an embedded player for a .WAV file causes the .WAV
file to start playing  (invisibly) before the prompt is even shown.   In
theory if a malformed .WAV file could expose a vulnerability, you'd be had.

--- BBBS/NT v4.01 Flag-5