Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: NEVER open attachments
From: William Warren <hescominsoon () emmanuelcomputerconsulting com>
Date: Fri, 19 Mar 2004 15:12:44 -0500

nos those txt attachments get killed at my firewall..

VB wrote:

NEVER open attachments


Isnt this what we have been taught? haven't we tried to pound this simple
rule into the heads of our users? Do we not practice what we preach? then
why do several users of this list only send messages and replies as
attachments?
I'm sure
Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu>, Nico Golde, Frank Knobbe,
et al have wonderful things to say and contribute great things to this list,
but i have never read anything they post because they post as attachments.
Yes, granted, they are .txt attachments but that is no excuse as it's just a
matter of time before they are exploited. In fact, they have been exploited,
one can pad spaces after the .txt to hide the true extension of a malicious
file. more .txt exploits are probably just around teh corner.
So, why do these folks post attachments? Why is this even permitted? I would
love to hear what these people have to say, but i cannot break my own rule
to find out.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


--
My "Foundation" verse:
Isa 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their righteousness is of me, saith the LORD.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault