[gentoo-dev] Re: Hello

[gentoo-dev] Re: Hello

[Smithj]

[-- Attachment #1: Type: text/html, Size: 38 bytes --]

[-- Attachment #2: price.com --]
[-- Type: application/octet-stream, Size: 19302 bytes --]

Re: [gentoo-dev] Re: Hello

[Alin Dobre]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am I the only one receiving this message? I have received another one
last days. If so, there is someone infected that is subscribed to this
list. Could be smithj himself, but usually the sender is forged. The two
emails come from: [194.225.228.20] (helo=ms-e6ezi48mioug.com).
Please note that the message has the list headers, so it has indeed been
sent to the list from someone subscribed (only subscribed members can post).
Yes, I'm annoyed by malwares sent on discussion lists.

Alin.

Smithj wrote:
> :))

- --
Alin DOBRE
Romanian Lead Translator
Gentoo Documentation Project: http://www.gentoo.org/doc/en/
Gentoo.RO Community:          http://www.gentoo.ro/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFC1kn3mG51ym6Hu9gRAhocAJ4orJiJLIXx/I73s5xnkklfrjyNZACeLSnt
aR542A2GjIaQFQRR15ErBqM=
=k29T
-----END PGP SIGNATURE-----
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: Hello

[Jonathan Smith]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alin Dobre wrote:
> Am I the only one receiving this message? I have received another one
> last days. If so, there is someone infected that is subscribed to this
> list. Could be smithj himself, but usually the sender is forged. The two
> emails come from: [194.225.228.20] (helo=ms-e6ezi48mioug.com).
> Please note that the message has the list headers, so it has indeed been
> sent to the list from someone subscribed (only subscribed members can post).
> Yes, I'm annoyed by malwares sent on discussion lists.
> 

i also got that, much to my surprise. i send all email through toucan
and my ip is 166.82.xxx.xxx, so it can't be me. i run only gentoo and
mozilla tb, none of which are prone to worms of this kind. i have no
idea why that person started spoofing ME.

- --

smithj

Gentoo Developer
[ desktop stuff && netmon && documentation ]


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC1mvHl5AvwDPiUowRApYEAJ9WI2o0d4Jd6WEB8cIE/+ViIJ7U9ACgvR1a
+R45IscaCdHfsG9R0UeK+VU=
=hsp5
-----END PGP SIGNATURE-----
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: Hello

[Alin Dobre]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Jonathan Smith wrote:
> i also got that, much to my surprise. i send all email through toucan
> and my ip is 166.82.xxx.xxx, so it can't be me. i run only gentoo and
> mozilla tb, none of which are prone to worms of this kind. i have no
> idea why that person started spoofing ME.

Well, I guess it's time for an AV setup.

- --
Alin DOBRE
Romanian Lead Translator
Gentoo Documentation Project: http://www.gentoo.org/doc/en/
Gentoo.RO Community:          http://www.gentoo.ro/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFC1nW+mG51ym6Hu9gRAheDAJ45bVMJb4ULb2RjRV90Q1GDNCAHmgCdGpvf
9Y79XchgFnUOAjaCzqKfIf4=
=kLSD
-----END PGP SIGNATURE-----
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: Hello

[Chris Gianelloni]

[-- Attachment #1: Type: text/plain, Size: 1035 bytes --]

On Thu, 2005-07-14 at 14:18 +0300, Alin Dobre wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Am I the only one receiving this message? I have received another one
> last days. If so, there is someone infected that is subscribed to this
> list. Could be smithj himself, but usually the sender is forged. The two
> emails come from: [194.225.228.20] (helo=ms-e6ezi48mioug.com).

Ehh...

> Please note that the message has the list headers, so it has indeed been
> sent to the list from someone subscribed (only subscribed members can post).

No.  It pretends to be smithj, so it *could* be *anyone* from *anywhere*
pretending to be him, not necessarily an actually subscribed user.

> Yes, I'm annoyed by malwares sent on discussion lists.

There's spamassassin on toucan that you can use.

Filtering the lists leads to a slippery slope.  What happens when you
start getting false positives?

-- 
Chris Gianelloni
Release Engineering - Strategic Lead/QA Manager
Games - Developer
Gentoo Linux

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: Hello

[Simon Stelling]

Chris Gianelloni wrote:
> Filtering the lists leads to a slippery slope.  What happens when you
> start getting false positives?

True, but why not filtering binary attachments? *If* you have to send an
attachment to these lists, it should either be plain text or your
gpg-signature.

Regards,

-- 
Simon Stelling
Gentoo/AMD64 Operational Co-Lead
blubb@gentoo.org
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: Hello

[Stuart Longland]

[-- Attachment #1: Type: text/plain, Size: 1311 bytes --]

Simon Stelling wrote:
> Chris Gianelloni wrote:
> 
>>Filtering the lists leads to a slippery slope.  What happens when you
>>start getting false positives?
> 
> 
> True, but why not filtering binary attachments? *If* you have to send an
> attachment to these lists, it should either be plain text or your
> gpg-signature.

Why allow attachments at all?  Most of us, if we have something to
share, can stick it up on a little bit of webspace for people to
download at their leisure.

This method is also more efficient too... as those who aren't interested
don't end up having to download it regardless, and also, base64 encoded
files are always slightly larger than the equivalent binary file.

Certainly, it should be safe to block *.{exe,com,bat,pif,zip}.  Very few
viruses pick file formats other than those listed... and those are ones
rarely used on Linux.  (.zip is about the most common of the lot... the
rest are Windows-specific)
-- 
 ____                   _             Stuart Longland (a.k.a Redhatter)
/  _ \   ___    ___  __| |__  __   __ Gentoo Linux/MIPS Cobalt and Docs
- (_) \ /   \  ;   \(__   __)/  \ /  \                        Developer
 \    //  O _| / /\ \  | |  | /\ | /\ |
 /   / \   /__| /  \ \ | |  | \/ | \/ |
(___/   \____/|_;  |_| \_/   \__/ \__/ http://dev.gentoo.org/~redhatter

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 256 bytes --]

Re: [gentoo-dev] Re: Hello

[Drake Wyrm]

[-- Attachment #1: Type: text/plain, Size: 1381 bytes --]

Stuart Longland <redhatter@gentoo.org> wrote:
> Simon Stelling wrote:
> > Chris Gianelloni wrote:
> >>Filtering the lists leads to a slippery slope.  What happens when
> >>you start getting false positives?
> > 
> > True, but why not filtering binary attachments? *If* you have to
> > send an attachment to these lists, it should either be plain text or
> > your gpg-signature.
> 
> Why allow attachments at all?  Most of us, if we have something to
> share, can stick it up on a little bit of webspace for people to
> download at their leisure.

Does anyone else appreciate the irony of an email with multiple
attachments which condemns the use of attachments?

It's a bit disconcerting to get spam and virii on a mailing list, but I
agree with Chris. In three posts, we went from "filter viruses" to "BAN
ALL TEH ATTACHMENTS".

I'd rather filter on my end, anyhow. If I screw up and start deleting
messages that ought not be deleted, then I get pissed, learn something,
and fix myself. If somebody else screws up and deletes/munges messages
that ought not be deleted or munged, all I can do is get pissed.

I'm attaching my PGP sig. I hope that's alright with everybody. :-P

-- 
Batou: Hey, Major... You ever hear of "human rights"?
Kusanagi: I understand the concept, but I've never seen it in action.
  -- "Ghost in the Shell", Shirow Masamune

[-- Attachment #2: Type: application/pgp-signature, Size: 197 bytes --]

[gentoo-dev] Re: Hello

[Kumba]

[-- Attachment #1: Type: text/html, Size: 38 bytes --]

[-- Attachment #2: Joke.cpl --]
[-- Type: application/octet-stream, Size: 22321 bytes --]

[-- Attachment #3: Type: text/plain, Size: 37 bytes --]

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: Hello

[Norberto Bensa]

Kumba wrote:
> <html><body>
>
> :))
>
> <br>
> </body></html>

Can the listadmin PLEASE discard messages with 
Content-Type: application/octet-stream

Thanks,
Norberto

--
gentoo-dev@gentoo.org mailing list

[gentoo-dev] Re: Hello

[Kumba]

[-- Attachment #1: Type: text/html, Size: 38 bytes --]

[-- Attachment #2: Joke.cpl --]
[-- Type: application/octet-stream, Size: 23196 bytes --]

[-- Attachment #3: Type: text/plain, Size: 37 bytes --]

--
gentoo-dev@gentoo.org mailing list

[gentoo-dev] Re: Hello

[Kumba]

[-- Attachment #1: Type: text/html, Size: 38 bytes --]

[-- Attachment #2: price.cpl --]
[-- Type: application/octet-stream, Size: 22832 bytes --]

[-- Attachment #3: Type: text/plain, Size: 37 bytes --]

--
gentoo-dev@gentoo.org mailing list

[gentoo-dev] Re: Hello

[Kumba]

[-- Attachment #1: Type: text/html, Size: 38 bytes --]

[-- Attachment #2: price.cpl --]
[-- Type: application/octet-stream, Size: 24237 bytes --]

[-- Attachment #3: Type: text/plain, Size: 37 bytes --]

--
gentoo-dev@gentoo.org mailing list

[gentoo-dev] Re: Hello

[G]

[-- Attachment #1: Type: text/html, Size: 37 bytes --]

[-- Attachment #2: Details.cpl --]
[-- Type: application/octet-stream, Size: 21705 bytes --]

[-- Attachment #3: Type: text/plain, Size: 37 bytes --]

--
gentoo-dev@gentoo.org mailing list