[Esa-l]You may want to poison "Simpsons Episodes"

John D. Hardin jhardin at impsec.org
Wed Jun 13 21:12:39 PDT 2001


On Tue, 12 Jun 2001, Brett Glass wrote:

> It can handle file names ending in ".extension", but it doesn't
> treat the extension as significant.
> 
> You have a good point, though: the sanitizer operates in a
> very "PC" way, mainly because it's primarily used to protect
> Windows users. John, what can one do to protect Mac users?

Ugh.

At this point, not much. How does the Mac figure out that the
attachment is an Applescript program?

I'm planning on adding mime type processing in addition to filespecs
for v2. You'd also be able to poison the specific full filename
(assuming any of the flippin' AV notices include it).

But in v1 it would have to have a specific filename extension.

--
 John Hardin KA7OHZ   ICQ#15735746   http://www.wolfenet.com/~jhardin/
 jhardin at wolfenet.com      pgpk -a finger://gonzo.wolfenet.com/jhardin
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  An entitlement beneficiary is a person or special interest group
  who didn't earn your money, but demands the right to take your
  money because they *want* it.
                                  -- John McKay, _The Welfare State:
                                     No Mercy for the Middle Class_
-----------------------------------------------------------------------
   1238 days until the Presidential Election



More information about the esd-l mailing list