lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1079728498.14280.27.camel@linus.calgary.chartwelltechnology.com>
From: ksmith at chartwelltechnology.com (Kenton Smith)
Subject: NEVER open attachments

I have to say that I have no idea what you are talking about, I never
see any email as attachments. Could it be your email client or server
(you're using Outlook Express apparently, so that could be it)?

Kenton

On Fri, 2004-03-19 at 12:27, VB wrote:
> NEVER open attachments
> 
> 
> Isnt this what we have been taught? haven't we tried to pound this simple
> rule into the heads of our users? Do we not practice what we preach? then
> why do several users of this list only send messages and replies as
> attachments?
> I'm sure
> Valdis.Kletnieks@...edu <Valdis.Kletnieks@...edu>, Nico Golde, Frank Knobbe,
> et al have wonderful things to say and contribute great things to this list,
> but i have never read anything they post because they post as attachments.
> Yes, granted, they are .txt attachments but that is no excuse as it's just a
> matter of time before they are exploited. In fact, they have been exploited,
> one can pad spaces after the .txt to hide the true extension of a malicious
> file. more .txt exploits are probably just around teh corner.
> So, why do these folks post attachments? Why is this even permitted? I would
> love to hear what these people have to say, but i cannot break my own rule
> to find out.
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ