Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: NEVER open attachments
From: "VB" <vb () bitsmart com>
Date: Fri, 19 Mar 2004 15:29:57 -0500

no, i was referring to the fact that the body of their e-mails were blank
and their text comes as a separate attachment. then i was informed that it
is actually my mail client that is not handling the pgp properly and this
does not happen to people using non MS clients. so.....Never Mind.
thanks to those that set me straight.
vb

----- Original Message ----- 
From: "Scott Boegemann" <sboegemann () adelphia net>
To: "'VB'" <vb () bitsmart com>
Sent: Friday, March 19, 2004 4:20 PM
Subject: RE: [Full-disclosure] NEVER open attachments


Uhmm, I think you're referring to their pgp signature data, not their
posts. But, I guess you can never be too safe :/

Regards-
Scott

-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of VB
Sent: Friday, March 19, 2004 2:28 PM
To: full-disclosure () lists netsys com; Valdis.Kletnieks () vt edu
Subject: [Full-disclosure] NEVER open attachments

NEVER open attachments


Isnt this what we have been taught? haven't we tried to pound this
simple
rule into the heads of our users? Do we not practice what we preach?
then
why do several users of this list only send messages and replies as
attachments?
I'm sure
Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu>, Nico Golde, Frank
Knobbe,
et al have wonderful things to say and contribute great things to this
list,
but i have never read anything they post because they post as
attachments.
Yes, granted, they are .txt attachments but that is no excuse as it's
just a
matter of time before they are exploited. In fact, they have been
exploited,
one can pad spaces after the .txt to hide the true extension of a
malicious
file. more .txt exploits are probably just around teh corner.
So, why do these folks post attachments? Why is this even permitted? I
would
love to hear what these people have to say, but i cannot break my own
rule
to find out.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]