full-disclosure - lists, autoresponders, and netiquette

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: lists, autoresponders, and netiquette 

On Thu, 27 May 2004 15:57:28 CDT, Michael Williamson <michael@...fin.tamucc.edu>  said:

> Every time I post to a list I get these "out of office" auto-responses.
> Can these responders be configured to not respond to stuff from a list?

Well.. Yes.  Sort of.  The 'vacation' program that ships with Sendmail has been
getting this right for close to 2 decades now.

The problem is that people insist on running crapware MUAs.

Obligatory security tie-in:  There's a wealth of information leakage by these
things:

1) You know the person is out of the office - meaning their desktop machine is
probably not being watched.  Improves your odds of attacking it unnoticed.

2) They're out of the office - leverage for social engineering attacks.  Call
their company: "Hey, this is Mr. Crapware - I'm at the user site and can't get
into the corporate LAN.  Can you reset my password so I can get the files I
need to close this deal?"

3) Most of the crapware that does the Out-of-Brain response is nice enough to
hand you an X-Mailer: line identifying itself, right down to the patch/build
level, so you know right away what sort of exploit to e-mail them so it will be
sitting in their Inbox when they get back and probably not being as careful
about what they open because they're swamped and trying to get caught up...

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040528/cddaddb1/attachment.bin