lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <Pine.GSO.4.43.0403051515170.15098-100000@tundra.winternet.com> From: dufresne at winternet.com (Ron DuFresne) Subject: [inbox] Re: Re: E-Mail viruses On Fri, 5 Mar 2004, Curt Purdy wrote: > Valdis.Kletnieks wrote: > > > > Ah, I wish... An alternative is to allow only a > > proprietary extension > > > through, like .inc Legitimate senders would rename the > > file, be it .exe > > > .doc .jpg, indicate in the body of the message what the > > true extension is, > > > and the receiver merely renames it. > > > So let's see.. the same bozos who read the text part of the > > virus, get the password, and > > use that to unzip the rest of the virus won't read the text > > part, get the rename to do, > > and..... > > > > Color me dubious.... > > Methinks you misunderstand. Only the proprietary extension, i.e. .inc or > .xyz or .whatever, would be allowed through, and since virus writers would > never use this extension, it would eliminate ALL viruses at the gateway. > The nice thing about this approach is that it completely eliminates the need > for any anti-virus on the mail server since all virus attachments are > automatically dropped without the need for scanning. Quite a simple, yet > elegant solution, if I do say so myself. Elegant for the technically clued, yet, I think Mr. Kletnieks is saying, and he will correct me if I'm off; How does one train the non-technically uninclined to understand this when they are the ones opening the virus/trjan infected password protected zip files in the first place? These folks, with all the sec training tossed at them bi-yearly should already know better, and don't thus opening their whole company to the problem in the first place. Not to mention as I already stated your way sir in private, the techies now have to spend time renaming these files for their users, or spending endless hours telling the same folks the same process once or twice a week <smile>. Danged old doogs will not get it, won't jot it down and post it to their cubicle wall for a resource, no matter how many milkbones you toss at em.. Thanks, Ron DuFresne ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "Cutting the space budget really restores my faith in humanity. It eliminates dreams, goals, and ideals and lets us get straight to the business of hate, debauchery, and self-annihilation." -- Johnny Hart ***testing, only testing, and damn good at it too!*** OK, so you're a Ph.D. Just don't touch anything.
Powered by blists - more mailing lists