Full Disclosure mailing list archives
Re: NEVER open attachments
From: "VB" <vb () bitsmart com>
Date: Fri, 19 Mar 2004 15:29:57 -0500
no, i was referring to the fact that the body of their e-mails were blank and their text comes as a separate attachment. then i was informed that it is actually my mail client that is not handling the pgp properly and this does not happen to people using non MS clients. so.....Never Mind. thanks to those that set me straight. vb ----- Original Message ----- From: "Scott Boegemann" <sboegemann () adelphia net> To: "'VB'" <vb () bitsmart com> Sent: Friday, March 19, 2004 4:20 PM Subject: RE: [Full-disclosure] NEVER open attachments
Uhmm, I think you're referring to their pgp signature data, not their posts. But, I guess you can never be too safe :/ Regards- Scott -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com] On Behalf Of VB Sent: Friday, March 19, 2004 2:28 PM To: full-disclosure () lists netsys com; Valdis.Kletnieks () vt edu Subject: [Full-disclosure] NEVER open attachments NEVER open attachments Isnt this what we have been taught? haven't we tried to pound this simple rule into the heads of our users? Do we not practice what we preach? then why do several users of this list only send messages and replies as attachments? I'm sure Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu>, Nico Golde, Frank Knobbe, et al have wonderful things to say and contribute great things to this list, but i have never read anything they post because they post as attachments. Yes, granted, they are .txt attachments but that is no excuse as it's just a matter of time before they are exploited. In fact, they have been exploited, one can pad spaces after the .txt to hide the true extension of a malicious file. more .txt exploits are probably just around teh corner. So, why do these folks post attachments? Why is this even permitted? I would love to hear what these people have to say, but i cannot break my own rule to find out. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: NEVER open attachments VB (Mar 19)
- <Possible follow-ups>
- RE: NEVER open attachments Staves, Steve (Mar 19)
- Re: NEVER open attachments gadgeteer (Mar 19)
- Re: Re: NEVER open attachments David Hane (Mar 19)
- Re: Re: NEVER open attachments gadgeteer (Mar 19)
- Re: NEVER open attachments gadgeteer (Mar 19)
- RE: NEVER open attachments Frank Knobbe (Mar 19)
- RE: NEVER open attachments David Vincent (Mar 25)
- Re: NEVER open attachments VB (Mar 25)