Full Disclosure mailing list archives
Re: NEVER open attachments
From: Ben Nelson <lists () venom600 org>
Date: Fri, 19 Mar 2004 13:22:34 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I think you're MUA is interpreting signed mail as simply a blank email with a text attachment (the PGP signed message). Many people on this list PGP sign their messages, so if your MUA is mis-interpreting these messages as text attachments, you need to either change MUA's or deal with it. - --Ben VB wrote: | NEVER open attachments | | | Isnt this what we have been taught? haven't we tried to pound this simple | rule into the heads of our users? Do we not practice what we preach? then | why do several users of this list only send messages and replies as | attachments? | I'm sure | Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu>, Nico Golde, Frank Knobbe, | et al have wonderful things to say and contribute great things to this list, | but i have never read anything they post because they post as attachments. | Yes, granted, they are .txt attachments but that is no excuse as it's just a | matter of time before they are exploited. In fact, they have been exploited, | one can pad spaces after the .txt to hide the true extension of a malicious | file. more .txt exploits are probably just around teh corner. | So, why do these folks post attachments? Why is this even permitted? I would | love to hear what these people have to say, but i cannot break my own rule | to find out. | | _______________________________________________ | Full-Disclosure - We believe in it. | Charter: http://lists.netsys.com/full-disclosure-charter.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAW1aK3cL8qXKvzcwRAomSAJ9uZRKzi9YR1SLhbMUpS4uJWE/inACeLM4E UgRzkxler26wnmN0hM+yq9Y= =fPFU -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: NEVER open attachments, (continued)
- Re: NEVER open attachments Bennett Todd (Mar 19)
- Re: NEVER open attachments gadgeteer (Mar 19)
- OT MS Code names (Was Re: Re: NEVER open attachments) Mike Barushok (Mar 19)
- Re: NEVER open attachments Nico Golde (Mar 20)
- AW: NEVER open attachments misiu_ (Mar 20)
- Re: NEVER open attachments Dave Sherohman (Mar 20)
- Re: NEVER open attachments Kenton Smith (Mar 19)
- Re: NEVER open attachments Nico Golde (Mar 20)
- Re: NEVER open attachments William Warren (Mar 19)
- Re: NEVER open attachments Nico Golde (Mar 20)
- Re: NEVER open attachments Ben Nelson (Mar 19)
- Re: NEVER open attachments Nico Golde (Mar 20)
- Re: NEVER open attachments Luis Bruno (Mar 19)
- Re: NEVER open attachments Paul Schmehl (Mar 19)
- Re: NEVER open attachments Jimmy Mitchener (Mar 19)
- Re: NEVER open attachments Nico Golde (Mar 20)
- Re: NEVER open attachments Troy (Mar 20)
- RE: NEVER open attachments Bill Royds (Mar 20)
- Free x.509 Certs (WAS Re: NEVER open attachments) Jeremiah Cornelius (Mar 21)
- Re: NEVER open attachments Nico Golde (Mar 21)
- Re: NEVER open attachments Troy (Mar 21)