lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <00c201c40df0$f23861f0$0b04b042@badass>
From: vb at bitsmart.com (VB)
Subject: NEVER open attachments

no, i was referring to the fact that the body of their e-mails were blank
and their text comes as a separate attachment. then i was informed that it
is actually my mail client that is not handling the pgp properly and this
does not happen to people using non MS clients. so.....Never Mind.
thanks to those that set me straight.
vb

----- Original Message ----- 
From: "Scott Boegemann" <sboegemann@...lphia.net>
To: "'VB'" <vb@...smart.com>
Sent: Friday, March 19, 2004 4:20 PM
Subject: RE: [Full-Disclosure] NEVER open attachments


> Uhmm, I think you're referring to their pgp signature data, not their
> posts. But, I guess you can never be too safe :/
>
> Regards-
> Scott
>
> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com
> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of VB
> Sent: Friday, March 19, 2004 2:28 PM
> To: full-disclosure@...ts.netsys.com; Valdis.Kletnieks@...edu
> Subject: [Full-Disclosure] NEVER open attachments
>
> NEVER open attachments
>
>
> Isnt this what we have been taught? haven't we tried to pound this
> simple
> rule into the heads of our users? Do we not practice what we preach?
> then
> why do several users of this list only send messages and replies as
> attachments?
> I'm sure
> Valdis.Kletnieks@...edu <Valdis.Kletnieks@...edu>, Nico Golde, Frank
> Knobbe,
> et al have wonderful things to say and contribute great things to this
> list,
> but i have never read anything they post because they post as
> attachments.
> Yes, granted, they are .txt attachments but that is no excuse as it's
> just a
> matter of time before they are exploited. In fact, they have been
> exploited,
> one can pad spaces after the .txt to hide the true extension of a
> malicious
> file. more .txt exploits are probably just around teh corner.
> So, why do these folks post attachments? Why is this even permitted? I
> would
> love to hear what these people have to say, but i cannot break my own
> rule
> to find out.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>


Powered by blists - more mailing lists