Full Disclosure mailing list archives

RE: A worm...


From: hobbit () avian org (*Hobbit*)
Date: Wed, 25 Jun 2003 20:32:34 +0000 (GMT)

Maybe I'm a bit out of the loop, but this one is interesting BECAUSE
of the .zip encapsulation.  The fact that it spreads at all is due
to one or both of

        .ZIP archives now auto-explode and auto-EXECUTE contents
        inside some MUAs

        people are being REALLY stupid

The first one, if true, is disturbing because it used to be that
wrapping content inside a .zip attachment is one way to get known
bad content to colleagues and NOT have it donked by [most] content
filters.  It should take manual, explicit action by the recipient
to open the .zip and be careful with the contents.

Is this no longer the case?!  What idiot mail-readers have auto-
execute-zip-contents capability, if any??  I knew this was comin'
someday, even so...

_H*
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: