Friends,

Nick suggested that the reason it got through the
virus filters was because it was MIME encoded.

Close.


The message got through the virus filters because it was *not* MIME-encoded -- it was a plain text message that just happened to contain the the textual representation of a MIME-encoded message.

What's the difference, you ask? The message itself is contained in a MIME "container" that has the type text/plain. The content *would* have been interpreted as the violating enclosure if it was not wrapped in a text/plain container, but it was.

In short, it looks like the goober who did this /almost/ knows what s/he is doing.

Viewing the archived copy <http://www.mccmedia.com/pipermail/brin-l/Week-of-Mon-20040329/036734.html>, while perfectly safe, still managed to trigger a virus alert from McAfee VirusScan on my machine, reporting an infection by the "W32/Netsky.d.eml!exe" virus -- it is responding to the bit patterns of the encoded data, even though it is really just plain text in an HTML page.

Dave

_______________________________________________
http://www.mccmedia.com/mailman/listinfo/brin-l

Reply via email to