full-disclosure - Trojan Horse for Mac OS X

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: Bojan.Zdrnja at LSS.hr (Bojan Zdrnja)
Subject: Trojan Horse for Mac OS X

 

> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com 
> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of 
> Thomas Vincent
> Sent: Saturday, 10 April 2004 10:27 a.m.
> To: Joshua Levitsky
> Cc: Full-Disclosure
> Subject: Re: [Full-Disclosure] Trojan Horse for Mac OS X
> 
> I stand corrected.
> At one point I was told by the developers that it would force you to 
> save the file. Guess that didn't happen or was changed.
> 

That is, actually, completely irrelevant. As we saw with Bagle worm, users
will do *anything* to open the attachment. Saving and running is just one
step more.

Cheers,

Bojan