[pmmail-list] newlines in filters? -- Sircam virus/worm

[xavier caballe]

>  I can't resist to complain that the weak point those worm-viruses
>attack is that on Microsoft Windows, the OS only offers "open" as an
>action to view a file, and "open" means both "execute" and "view",
>without a difference. 
>  The default action on foreign files should be "view" excluding any
>execution of code in the file, not "execute". 

I don't understand your comment. Sircam sends an executable file (.EXE,
.COM, .BAT, .PIF or .LNK). There's no logic to "view" this kind of files,
since is very unlikely that they will contain any readable information (at
least on Windows but also on OS/2). 

If you send a "data" document, Windows (and OS/2) will open the associated
program and this program will open the "data" document. BTW... .BAT files
are considered as "data" documents... they're not directly executed;
instead, CMD runs them.


Xavi
---
http://www.quands.com
Portal de seguretat informātica en catalā

- pmmail-list - The PMMail Dicussion List ---------------------------
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first 
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com