VIRUS (Worm.SCO.A) IN YOUR MAIL (fwd)

[invalid at pizzashack.org (Derek Martin)]

On Tue, Jan 27, 2004 at 12:28:48PM -0500, Johannes B. Ullrich wrote:
> I guess its more a case of clue-less AV admins. These notifications are 
> essentially pointless, and in some cases worse then then virus
> (I got flooded with them back when Sobig-f came out)
> 

While I think that might be partially true (rejecting mail for an
offending attachment is dumb), I don't think sending a notification
is dumb at all.  On a number of occasions my e-mail has been blocked
because the message was PGP-signed, and the signature was considered
an unknown and/or malicious attachment type.

Had I not received notification of this from the mail system, I would
have lost out on several job interview opportunities, because neither
I nor the intended recipient would have known I'd sent that mail.

Receiving false virus reports and such from forged headers is
unfortunate, but to call sending them at all "clue-less" is at least a
bit short-sighted.



-- 
Derek D. Martin
http://www.pizzashack.org/
GPG Key ID: 0xDFBEAD02
-=-=-=-=-
This message is posted from an invalid address.
Replying to it will result in undeliverable mail.
Sorry for the inconvenience.  Thank the spammers.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.blu.org/pipermail/discuss/attachments/20040129/cbf25922/attachment.sig>