RE: [Freebsd-hackers] Yes, send-pr results in virus emails

From: Remko Lodder (remko_at_elvandar.org)
Date: 01/27/04

  • Next message: rmkml: "fopen() on a pipe blocks multi threated applications." 
    To: "Clifton Royston" <cliftonr@tikitechnologies.com>, <hackers@freebsd.org>
Date: Tue, 27 Jan 2004 14:40:01 +0100

    right,

    and perhaps the pr stuff is on a archive somewhere, since it gets forwarded
    to
    freebsd-bugs for example, then gets fetched by a virus/worm or something
    and you still get slained by it,

    What i try to say is that there are many ways in which your mail address
    might be
    snooped, and since there are quite a lot of users on this list, and there
    shall
    always be an infected machine, makes it quite hard to track all those
    persons down,
    personally i dont think there is that much time,

    cheers 

    --
Kind regards,
Remko Lodder
Elvandar.org/DSINet.org
www.mostly-harmless.nl Dutch community for helping newcomers on the
hackerscene
-----Oorspronkelijk bericht-----
Van: freebsd-hackers-bounces@lists.elvandar.org
[mailto:freebsd-hackers-bounces@lists.elvandar.org]Namens Clifton
Royston
Verzonden: dinsdag 27 januari 2004 0:58
Aan: hackers@freebsd.org
Onderwerp: [Freebsd-hackers] Yes, send-pr results in virus emails
  OK, on January 23 I sent in a PR from a development-only machine
using the send-pr command.  This machine happens to actually receive
mail because I'm testing mail server software on it, but I have never
used it to send mail, and I have never gotten mail on that machine
other than via sending test messages to myself.  So this address did
*not* exist in anybody's address book before I sent a PR from it, OK?
  About 8 minutes after the PR acknowledgment from GNATS I got the
first virus response of Worm/Gibe.F, originating from
cpe-138-217-67-84.vic.bigpond.net.au [138.217.67.84].  I've totalled 20
virus emails in the past few days, from around the world.  Not
horrendous, but annoying and "bad press".
  I don't think there need be any more doubt that PRs are being
forwarded to virus-infected clients.  I have no idea who to take this
up with, but I would really appreciate it if somebody could track
these folks down and unsubscribe them until they can get their
machines cleaned up.  Rather than harass all the readers with the
list, I've compiled one and I'll send it to an appropriate
administrator for the PR list when I find one.
  -- Clifton
--
          Clifton Royston  --  cliftonr@tikitechnologies.com
         Tiki Technologies Lead Programmer/Software Architect
Did you ever fly a kite in bed?  Did you ever walk with ten cats on your
head?
  Did you ever milk this kind of cow?  Well we can do it.  We know how.
If you never did, you should.  These things are fun, and fun is good.
                                                                 -- Dr.
Seuss
_______________________________________________
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
_______________________________________________
Freebsd-hackers mailing list
Freebsd-hackers@lists.elvandar.org
http://lists.elvandar.org/mailman/listinfo/freebsd-hackers
_______________________________________________
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"
  • Next message: rmkml: "fopen() on a pipe blocks multi threated applications."