full-disclosure - Administrivia: Binary Executables w/o Source

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: dcopley at eeye.com (Drew Copley)
Subject: Administrivia: Binary Executables w/o Source


> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com 
> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of 
> Andreas Gietl
> Sent: Monday, August 18, 2003 4:10 PM
> To: Drew Copley; full-disclosure@...ts.netsys.com
> Subject: Re: [Full-Disclosure] Administrivia: Binary 
> Executables w/o Source
> 
> 
> On Tuesday 19 August 2003 00:26, Drew Copley wrote:
> 
> I think it may not be a good idea to send binaries to the 
> list, because lot of 
> companies run antivirus-gateways at their smtp-server and 
> would reject the 
> message, so the recipient would be cut off the information. 
> Today sb sent a 
> copy of the Win32/Nachi-Worm - as  i requested - to the list. 
> I got about 20 
> mails from av-mail-gateways. I did not expect to get the 
> virus on - the - 
> list and especially not sent via mail. Next time i gonna 
> state that in my 
> mail - i apologize for the Inconvenience todays nachi may 
> have caused to you.

As I noted further down, I wanted that binary. Yes, it is nicer and more
polite to have it on a website, but it is someone doing someone else a
favor.

There are very few good places to get copies of virii in the wild (apart
from trojans or other such apps you may find on packetstorm, et al).
But, a lot of people need copies of these to make firewall signatures,
et al. There remains this fear of virii, as there once was more of for
security hole information. There should not be, they are in the same
class of information.



> 
> > If anybody is stupid enough to run a binary file from here they 
> > deserve any negative consequences which may result from that.
> >
> > Okay, I know other people are thinking that because it is just so 
> > true.
> >
> > This said, someone sent a copy of this lastest fixer 
> msblast variant. 
> > I appreciated that. But, proper netiquette says to not send 
> binaries 
> > nor pictures to internet lists (newsgroups or mailing lists). It is 
> > best to send by url, such urls are very valuable.
> >
> > (Personally, I have never cared about binaries nor pictures 
> being sent 
> > as long as their size were small... It is just html email which I 
> > hate.)
> >
> 
> 
> -- 
> e-admin internet gmbh
> Andreas Gietl                                            tel 
> +49 941 3810884
> Ludwig-Thoma-Strasse 35                      fax +49 
> (0)1805/39160 - 29104
> 93051 Regensburg                                  mobil +49 
> 171 6070008
> 
> PGP/GPG-Key unter http://www.e-admin.de/gpg.html
> 
> 
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>