full-disclosure - AW: AV "feature" does more DDoS than Sobig

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <DF79BE12AF8DD344B107D0D03621E5750ED9EE@kermit.corp.hansenet.com>
From: vogt at hansenet.com (vogt@...senet.com)
Subject: AW: AV "feature" does more DDoS than Sobig

> form of SPAM perhaps, another viri form perhaps also, at least a by
> product of the original virus/trojan.  Perhaps the best way 
> to deal with
> these, since most everyone contacted, the originator and the 
> AV vendor,
> are bit-bucketing all the e-mail responses to them, is to just promail
> filter then to /dev/null.  else, you become part of the perpetual
> 'SPAM/viri-by-product" problem, wasting and consuming bandwidth

Actually, I don't think that is a good solution. It protects your
inbox, but not your pipe, and it wakes nobody up to the problem.

I'm currently REJECTing all incoming "virus from you" mails. Maybe
the admins will act when they get the damage straight back into
their own mailboxes.

Then again, maybe THEY just file it all to /dev/null. Wouldn't be
surprised at the really responsible behaviour of setting up a
robot and then dropping the bounces it creates.

Tom Vogt