Full Disclosure mailing list archives

RE: antivirus s/w

From: "Jos Osborne" <Jos () meltemi co uk>
Date: Tue, 27 Jan 2004 16:37:33 -0000

PLEASE MAKE SURE that it doesn't send email responses.

I'm getting 500 mydoom an hour.  I can filter those.
I'm getting 1500 AV-responses an hour.  I can't filter those.

AV response email is PART OF THE PROBLEM now, not PART OF THE SOLUTION.



Especially with virii spoofing the "From" field now. It just ends up with somebody at random getting the response, 
which is likely to cause more confusion.

Jos

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

Re: antivirus s/w, (continued)
- Re: antivirus s/w Gadi Evron (Jan 27)
- Re: antivirus s/w Dennis Opacki (Jan 27)
- Re: antivirus s/w Luca Mihailescu (Jan 27)
- Re: antivirus s/w Randal L. Schwartz (Jan 27)
  - Re: antivirus s/w Patrick J Okui (Jan 27)
  - Re: antivirus s/w Volker Tanger (Jan 27)
  - Re: antivirus s/w Gustavo A. Lozano (Jan 27)
  - RE: antivirus s/w Steve Wray (Jan 27)
    - Re: antivirus s/w William Warren (Jan 27)
    - Re: antivirus s/w I.R. van Dongen (Jan 27)
- RE: antivirus s/w Jos Osborne (Jan 27)
  - RE: antivirus s/w Bryan K. Watson (Jan 27)
    - Re: antivirus s/w Damian Gerow (Jan 27)
- RE: antivirus s/w Kevin Cherry (Jan 27)
- RE: antivirus s/w Kevin Patterson (Jan 27)
  - Re: antivirus s/w Georgi Guninski (Jan 27)