Re: [Full-Disclosure] Re: Jkuperus <jkuperus@planet.nl>

[James Riden <j.riden@xxxxxxxxxxxx>]

"Vince Able" <we_hate_vince@xxxxxxxxxxx> writes:

>    Can anyone tell me why this idiot keeps trying to send the group
>    kiddies script worms/viruses.

Even on a list like bugtraq, you're likely to get PoCs and worse sent
- you probably shouldn't read a security list on a platform which you
think may be vulnerable - e.g. use a UNIX flavour, or a MUA which you
are sure won't auto-execute anything, or make sure your AV and patches
are up-to-date (or all three :).

Besides, most email-borne viruses forge the sender these days, so it's
likely to have come from a different infected computer which has both
the FD list and the purported senders addresses on it. Check the
Received headers to find out exactly where it's originated.

cheers,
 Jamie
-- 
James Riden / j.riden@xxxxxxxxxxxx / Systems Security Engineer
Information Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html