Home page logo

fulldisclosure logo Full Disclosure mailing list archives

RE: NEVER open attachments
From: "Staves, Steve" <SStaves () mail canfor ca>
Date: Fri, 19 Mar 2004 12:43:59 -0800

I would like to second that motion.  I never open attachments, especially on
newsgroups etc as they are a prime target.

-----Original Message-----
From: VB [mailto:vb () bitsmart com] 
Sent: Friday, March 19, 2004 11:28 AM
To: full-disclosure () lists netsys com; Valdis.Kletnieks () vt edu
Subject: [Full-disclosure] NEVER open attachments

NEVER open attachments

Isnt this what we have been taught? haven't we tried to pound this simple
rule into the heads of our users? Do we not practice what we preach? then
why do several users of this list only send messages and replies as
attachments? I'm sure Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu>,
Nico Golde, Frank Knobbe, et al have wonderful things to say and contribute
great things to this list, but i have never read anything they post because
they post as attachments. Yes, granted, they are .txt attachments but that
is no excuse as it's just a matter of time before they are exploited. In
fact, they have been exploited, one can pad spaces after the .txt to hide
the true extension of a malicious file. more .txt exploits are probably just
around teh corner. So, why do these folks post attachments? Why is this even
permitted? I would love to hear what these people have to say, but i cannot
break my own rule to find out.

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]