full-disclosure - [inbox] Re: Fwd: Re: Administrivia: Binary Executables w/o Source

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: lists.netsys.com at jscript.dk (Thor Larholm)
Subject: [inbox] Re: Fwd: Re: Administrivia: Binary Executables w/o Source

> From: "Jason Coombs" <jasonc@...ence.org>
> Perhaps Len could send a single digest message to the list revealing the
> identity of each subscriber who tried to spam us with a sobig attachment --
> it's the least he could do after intentionally covering up for these people.

In that case, I would prefer if Len put up an archive of all the virus mails
sent to FD so everybody on the list could have fun analyzing it. Couple it with
the archives of normal posts and some regging+grep'ing you will be bound to find
correlations between posting IP addresses.

In fact, you could automate the process and have your script generate a list of
people to forcefully unsubscribe from the list due to negligence :)

"Get infected and get unsubscribed"

"Got virus?"


Regards
Thor Larholm
PivX Solutions, LLC - Senior Security Researcher