lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <405B568A.30405@venom600.org> From: lists at venom600.org (Ben Nelson) Subject: NEVER open attachments -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I think you're MUA is interpreting signed mail as simply a blank email with a text attachment (the PGP signed message). Many people on this list PGP sign their messages, so if your MUA is mis-interpreting these messages as text attachments, you need to either change MUA's or deal with it. - --Ben VB wrote: | NEVER open attachments | | | Isnt this what we have been taught? haven't we tried to pound this simple | rule into the heads of our users? Do we not practice what we preach? then | why do several users of this list only send messages and replies as | attachments? | I'm sure | Valdis.Kletnieks@...edu <Valdis.Kletnieks@...edu>, Nico Golde, Frank Knobbe, | et al have wonderful things to say and contribute great things to this list, | but i have never read anything they post because they post as attachments. | Yes, granted, they are .txt attachments but that is no excuse as it's just a | matter of time before they are exploited. In fact, they have been exploited, | one can pad spaces after the .txt to hide the true extension of a malicious | file. more .txt exploits are probably just around teh corner. | So, why do these folks post attachments? Why is this even permitted? I would | love to hear what these people have to say, but i cannot break my own rule | to find out. | | _______________________________________________ | Full-Disclosure - We believe in it. | Charter: http://lists.netsys.com/full-disclosure-charter.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAW1aK3cL8qXKvzcwRAomSAJ9uZRKzi9YR1SLhbMUpS4uJWE/inACeLM4E UgRzkxler26wnmN0hM+yq9Y= =fPFU -----END PGP SIGNATURE-----
Powered by blists - more mailing lists