Re: vacation mail

2014-08-07 Thread Daniel
It's not the first, and it won't be the last.

Y'know, if I was a malicious individual I might lurk the Debian security 
mailing lists until I saw such an announcement, and then wait for a security 
vulnerability, for example [DSA 2998-1] to be posted thereafter. Deducing that 
the individual or their organisation ran Debian, I might then scan or probe the 
domain which issued to vacation mail to ascertain if they were vulnerable. 
Having all the information I needed to take advantage of the vulnerability in 
the DSA, I might then attack said individual or their organisation, safe in the 
knowledge that they would not be back in the office to deal with the problem 
until August 25th. Such vacation mails would make my job alot easier.

IT is fortunate for the senders of such mails that I am not a malicious 
individual.

Best regards,

Daniel

On 6 Aug 2014, at 09:49, Grond wrote:

 Bugger, but someone has *reeaally* poor manners.
 
 A vacation notice to a mailing list?
 I mean; really?
 
 I do *hope* that we will not be spammed by this until 
 August 25th.
 
 (I realize that this rant may not meet
 minimum notability for this list.)
 
 
 On Tue, Aug 05, 2014 at 08:13:31PM +0200, programac...@sf-informatica.com 
 wrote:
 Els missatges enviats a aquesta adreça de correu no s'atendran fins al 25 
 d'agost. Si us plau, si és urgent, posi's en contacte amb 
 urgenc...@sf-informatica.com. Disculpi les molèsties.
 
 Los mensajes enviados a esta dirección de correo no se atenderán hasta el 25 
 de agosto. Por favor, si es urgente, póngase en contacto con 
 urgenc...@sf-informatica.com. Disculpe las molestias.
 
 
 
 
 -- 
 To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: 
 https://lists.debian.org/20140805181331.32e066041d...@11vs2.vspain.net
 
 -- 
 
 Attached is my PGP public key.
 Primary key fingerprint: B7C7 AD66 D9AF 4348 0238  168E 2C53 D8FA 55D8 9FD9
 
 If you have a PGP key (and a minute to spare)
 please send it in reply to this email.
 
 If you have no idea what PGP is, feel free
 to ignore all this gobbledegook.
 Mail Attachment


--
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/646a2551-a655-4620-b57f-46a5cbed4...@noflag.org.uk



Re: vacation mail

2014-08-07 Thread Jason Fergus
Ha, I think it's hilarious when people do this.  Also stupid, but if it
weren't for stupid people, who would we have to laugh at?  :D

On Thu, 2014-08-07 at 15:54 +0100, Daniel wrote:
 It's not the first, and it won't be the last.
 
 Y'know, if I was a malicious individual I might lurk the Debian security 
 mailing lists until I saw such an announcement, and then wait for a security 
 vulnerability, for example [DSA 2998-1] to be posted thereafter. Deducing 
 that the individual or their organisation ran Debian, I might then scan or 
 probe the domain which issued to vacation mail to ascertain if they were 
 vulnerable. Having all the information I needed to take advantage of the 
 vulnerability in the DSA, I might then attack said individual or their 
 organisation, safe in the knowledge that they would not be back in the office 
 to deal with the problem until August 25th. Such vacation mails would make my 
 job alot easier.
 
 IT is fortunate for the senders of such mails that I am not a malicious 
 individual.
 
 Best regards,
 
 Daniel
 
 On 6 Aug 2014, at 09:49, Grond wrote:
 
  Bugger, but someone has *reeaally* poor manners.
  
  A vacation notice to a mailing list?
  I mean; really?
  
  I do *hope* that we will not be spammed by this until 
  August 25th.
  
  (I realize that this rant may not meet
  minimum notability for this list.)
  
  
  On Tue, Aug 05, 2014 at 08:13:31PM +0200, programac...@sf-informatica.com 
  wrote:
  Els missatges enviats a aquesta adreça de correu no s'atendran fins al 25 
  d'agost. Si us plau, si és urgent, posi's en contacte amb 
  urgenc...@sf-informatica.com. Disculpi les molèsties.
  
  Los mensajes enviados a esta dirección de correo no se atenderán hasta el 
  25 de agosto. Por favor, si es urgente, póngase en contacto con 
  urgenc...@sf-informatica.com. Disculpe las molestias.
  
  
  
  
  -- 
  To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
  with a subject of unsubscribe. Trouble? Contact 
  listmas...@lists.debian.org
  Archive: 
  https://lists.debian.org/20140805181331.32e066041d...@11vs2.vspain.net
  
  -- 
  
  Attached is my PGP public key.
  Primary key fingerprint: B7C7 AD66 D9AF 4348 0238  168E 2C53 D8FA 55D8 9FD9
  
  If you have a PGP key (and a minute to spare)
  please send it in reply to this email.
  
  If you have no idea what PGP is, feel free
  to ignore all this gobbledegook.
  Mail Attachment
 
 



-- 
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/1407426504.2771.0.ca...@jfergusdeb.proofpoint.com



Re: vacation mail

2014-08-07 Thread Gunnar Wolf
Jason Fergus dijo [Thu, Aug 07, 2014 at 09:48:24AM -0600]:
 Ha, I think it's hilarious when people do this.  Also stupid, but if it
 weren't for stupid people, who would we have to laugh at?  :D

Right. And these messages bug us, true. But please, stop it. Debian
project mailing lists are not the right place to laugh at people.


signature.asc
Description: Digital signature