From: Vincent Danen (vdanenmandrakesoft.com)
Date: Sun Aug 31 2003 - 15:54:59 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Sun Aug 31, 2003 at 12:59:00PM +0200, Buchan Milne wrote:

> > > > <snip>
> > > > It doesn't look like any virus was sent *to* the list, but someone with
> > > > this address in their address book got hit and here we are.
> > >
> > > Hi,
> > >
> > > Wasn't this the W32/Sobig.fMM virus ?
> > > http://archives.mandrakelinux.com/discuss/2003-08/msg00031.php
> >
> > Hmmm... looks like it. Another person being unsubscribed then.
>
> That's not a responsible action, considering Sobig forges From: headers. I
> have received almost no mail from Sobig itself (thanks to a simple postfix
> header check that covers all typical virus-sent attachments), but have
> received a lot of mails from misconfigured virus scanners telling me I had
> sent a virus, using Outlook Express, from somewhere in France (you can
> guess how many of those are true ...).

Well, it kinda looks like it was the same person, so only one person was
unsubscribed.

Anyways, it isn't an irresponsible action. What is irresponsible is the
person who, after all of this time, *still* has not taken the steps to
secure their own computer from this thing. I consider that more
irresponsible than arbitrarily unsubscribing someone who, although having
ample time and opportunity, hasn't disinfected their machine yet.

--
MandrakeSoft Security; http://www.mandrakesecure.net/
Online Security Resource Book; http://linsec.ca/
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FE6F2AFD : 88D8 0D23 8D4B 3407 5BD7 66F9 2043 D0E5 FE6F 2AFD}

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQE/UmCjIEPQ5f5vKv0RAk/YAJ4w7pcFwT6KsgqeVt9Sqnl7vNmggQCfbStv
dePaxvDULdULi7nznM0LL3o=
=lXtX
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]