Re: Changing the "Reply-To:" for debian-security-announce

2016-03-02 Thread Don Armstrong
On Wed, 02 Mar 2016, Andrew Vaughan wrote:
> I'm wondering why the body of the email doesn't include instructions on how
> to unsubscribe?

Because of DMARC and other message-body signing anti-spam measures.

The headers of every single message we send do include instructions on
how to unsubscribe, and we also have filters to catch obvious
administrivia.

-- 
Don Armstrong  http://www.donarmstrong.com

He wore trifocals. There was stratigraphy even in his glasses.
 -- John McPhee _Annals of the Former World_ p364



Re: Vacation messages (was: Re: [SECURITY] [DSA 1629-1] New postfix packages fix privilege escalation)

2008-08-18 Thread Don Armstrong
On Mon, Aug 18, 2008 at 06:37:25PM -0300, Eduardo M KALINOWSKI wrote:
> Why is that that only in this list one gets these annoying vacation
> messages from morons that cannot configure their mail systems not to
> send vacation messages to mailing lists, but one does not receive them
> in other debian mailing lists?

If you run into these problems, send a mail to
[EMAIL PROTECTED]; we aren't subscribed to every list, and
so we often miss these messages.

I've forcibly unsubscribed this person.


Don Armstrong

-- 
The computer allows you to make mistakes faster than any other
invention, with the possible exception of handguns and tequila
 -- Mitch Ratcliffe

http://www.donarmstrong.com  http://rzlab.ucr.edu


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Mozilla/Firefox "PostScript/default" security problems

2004-07-10 Thread Don Armstrong
On Sat, 10 Jul 2004, Michael B Allen wrote:
> My impression was that the PostScript generator had the security
> issue

Can someone please state, for the record, definitively and precisely
what this "security issue" is?

The fact that PS is a turing complete language isn't a security issue,
beyond the fact that you shouldn't blindly execute untrusted PS. (Just
like you shouldn't blindly execute make files, or C code, or perl
scripts...)

Perhaps I've missed something, but everything that I've read in the
threads so far amounts to people either assuming that there's an issue
and not defining it, or attempting to figure out where the issue is.


Don Armstrong

-- 
Personally, I think my choice in the mostest-superlative-computer wars
has to be the HP-48 series of calculators.  They'll run almost
anything.  And if they can't, while I'll just plug a Linux box into
the serial port and load up the HP-48 VT-100 emulator.
 -- Jeff Dege, [EMAIL PROTECTED]

http://www.donarmstrong.com
http://rzlab.ucr.edu


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]