full-disclosure - Administrivia: Testing Emergency Virus Filter..

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: jeroen at unfix.org (Jeroen Massar)
Subject: Administrivia: Testing Emergency Virus Filter..

-----BEGIN PGP SIGNED MESSAGE-----

Richard M. Smith wrote:

>   >>> The wetware could make better decisions is his M$ 
>   >>> Outlook actually told him he was running an .exe file 
>   >>> instead of looking at a .gif...
> 
> My own view is that sending out executables as attached files to email
> messages regardless if the files are friendly or if they are 
> malware is
> socially unacceptable.  Just like smoking on a commercial airliner is
> now socially unacceptable.  
> 
> For programmers who need to send around executables, please 
> ZIP them up first.

Hint for the new generation of virusmakers: Zip thou virii ;)

Fortunatly real solutions for this problem like amavis simply
unzip attachements though only upto a certain level.
But you must be a really really stupid user if you are going
to unzip a file 20 times just to see what is really in there.
Then again making them think it includes some new hot pix of
whoever is hot at that moment should do the trick and ofcourse
we should take into account the huge stupid user factor.

Greets,
 Jeroen

-----BEGIN PGP SIGNATURE-----
Version: Unfix PGP for Outlook Alpha 13 Int.
Comment: Jeroen Massar / jeroen@...ix.org / http://unfix.org/~jeroen/

iQA/AwUBP0N0LymqKFIzPnwjEQLx6wCgpNNOV27rkRFod3DKpbZQaZhkjYMAnRWm
by7qAcEzHoGdkji+KBF+f3F9
=UM7b
-----END PGP SIGNATURE-----