Full Disclosure mailing list archives
Re: NEVER open attachments
From: Jimmy Mitchener <jman5000 () pacbell net>
Date: Fri, 19 Mar 2004 21:37:03 -0800
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I am with everyone else when they claim you need to find a decent MUA. But regardless, I think you need to learn about a little friend of mine called SYSTRACE! I don't run anything I deem insecure without it (im clients, mail clients, firefox, any and everything I don't trust). I really don't see how someone can claim their system is "safe" when they are not watching, monitoring, and setting policies for every major application that they run on their system. Jimmy Mitchener VB wrote: | NEVER open attachments | | | Isnt this what we have been taught? haven't we tried to pound this simple | rule into the heads of our users? Do we not practice what we preach? then | why do several users of this list only send messages and replies as | attachments? | I'm sure | Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu>, Nico Golde, Frank Knobbe, | et al have wonderful things to say and contribute great things to this list, | but i have never read anything they post because they post as attachments. | Yes, granted, they are .txt attachments but that is no excuse as it's just a | matter of time before they are exploited. In fact, they have been exploited, | one can pad spaces after the .txt to hide the true extension of a malicious | file. more .txt exploits are probably just around teh corner. | So, why do these folks post attachments? Why is this even permitted? I would | love to hear what these people have to say, but i cannot break my own rule | to find out. | | _______________________________________________ | Full-Disclosure - We believe in it. | Charter: http://lists.netsys.com/full-disclosure-charter.html | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAW9h+wWNPHBCx0c8RArv0AJ9or6OiE3xeXEdjcv1Si461GEws3gCdE4L4 SbMmYsy0Tc+ZMYchCzEeI0E= =lrUL -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- AW: NEVER open attachments, (continued)
- AW: NEVER open attachments misiu_ (Mar 20)
- Re: NEVER open attachments Dave Sherohman (Mar 20)
- Re: NEVER open attachments Kenton Smith (Mar 19)
- Re: NEVER open attachments Nico Golde (Mar 20)
- Re: NEVER open attachments William Warren (Mar 19)
- Re: NEVER open attachments Nico Golde (Mar 20)
- Re: NEVER open attachments Ben Nelson (Mar 19)
- Re: NEVER open attachments Nico Golde (Mar 20)
- Re: NEVER open attachments Luis Bruno (Mar 19)
- Re: NEVER open attachments Paul Schmehl (Mar 19)
- Re: NEVER open attachments Jimmy Mitchener (Mar 19)
- Re: NEVER open attachments Nico Golde (Mar 20)
- Re: NEVER open attachments Troy (Mar 20)
- RE: NEVER open attachments Bill Royds (Mar 20)
- Free x.509 Certs (WAS Re: NEVER open attachments) Jeremiah Cornelius (Mar 21)
- Re: NEVER open attachments Nico Golde (Mar 21)
- Re: NEVER open attachments Troy (Mar 21)
- Re: Re: Administrivia Ron DuFresne (Mar 19)
- Re: Re: Microsoft Security, baby steps ? William Warren (Mar 18)