lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <405BD87F.5070006@pacbell.net>
From: jman5000 at pacbell.net (Jimmy Mitchener)
Subject: NEVER open attachments

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am with everyone else when they claim you need to find a decent MUA.
But regardless, I think you need to learn about a little friend of mine
called SYSTRACE! I don't run anything I deem insecure without it (im
clients, mail clients, firefox, any and everything I don't trust). I
really don't see how someone can claim their system is "safe" when they
are not watching, monitoring, and setting policies for every major
application that they run on their system.

Jimmy Mitchener


VB wrote:
| NEVER open attachments
|
|
| Isnt this what we have been taught? haven't we tried to pound this simple
| rule into the heads of our users? Do we not practice what we preach? then
| why do several users of this list only send messages and replies as
| attachments?
| I'm sure
| Valdis.Kletnieks@...edu <Valdis.Kletnieks@...edu>, Nico Golde, Frank
Knobbe,
| et al have wonderful things to say and contribute great things to this
list,
| but i have never read anything they post because they post as attachments.
| Yes, granted, they are .txt attachments but that is no excuse as it's
just a
| matter of time before they are exploited. In fact, they have been
exploited,
| one can pad spaces after the .txt to hide the true extension of a
malicious
| file. more .txt exploits are probably just around teh corner.
| So, why do these folks post attachments? Why is this even permitted? I
would
| love to hear what these people have to say, but i cannot break my own rule
| to find out.
|
| _______________________________________________
| Full-Disclosure - We believe in it.
| Charter: http://lists.netsys.com/full-disclosure-charter.html
|

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFAW9h+wWNPHBCx0c8RArv0AJ9or6OiE3xeXEdjcv1Si461GEws3gCdE4L4
SbMmYsy0Tc+ZMYchCzEeI0E=
=lrUL
-----END PGP SIGNATURE-----


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ