Re: [newbie] Virus - let's go over this again, shall we?u
On Sunday 07 Sep 2003 11:30 pm, Eric Huff wrote: Although, the irony is that MS selling Anti-Virus software is sort of like the Mafia selling insurance against extortion. Yeah, no kidding! So are we going to see ***more holes*** for virii now that they will benefit from the FUD? Is it possible? Anne -- Registered Linux User No.293302 Have you visited http://twiki.mdklinuxfaq.org yet? Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
On Sun, 07 Sep 2003 12:34:27 -0400 Lanman [EMAIL PROTECTED] uttered: John? You better start running, buddy! Guido's coming! Searching the archives (away for most of the weekend, sorry), I can't figure out, who this John guy is you want dead so bad -- HaywireMac Registered Linux user #282046 Homepage: nodex.sytes.net ++ Mandrake HowTo's More: http://twiki.mdklinuxfaq.org ++ The farther you go, the less you know. -- Lao Tsu, Tao Te Ching Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
You won't find him in the archives. He was fictitious. Got into the beer a bit this weekend did we Joe? LOL! Lanman *** REPLY SEPARATOR *** On 9/8/2003 at 6:08 AM HaywireMac wrote: On Sun, 07 Sep 2003 12:34:27 -0400 Lanman [EMAIL PROTECTED] uttered: John? You better start running, buddy! Guido's coming! Searching the archives (away for most of the weekend, sorry), I can't figure out, who this John guy is you want dead so bad -- HaywireMac Registered Linux user #282046 Homepage: nodex.sytes.net ++ Mandrake HowTo's More: http://twiki.mdklinuxfaq.org ++ The farther you go, the less you know. -- Lao Tsu, Tao Te Ching Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
Lanman wrote: AAAarrghghghghgh! Frankie? Did you have to do that? Now that Stephen knows that we appreciate common sense we'll never get a decent day's work out of him. Damn! Welcome to Stephen, The Next Generation ! LOL! But since we're on the subject of viruses, and since I've been way to busy to read every single last post on this subject, I'd like to ask one thing. Has anyone told the list that an infected email received on this list may not have come from the person named? These types of viruses will (if activated on a WinBlow$-handicapped system), will run to the address book, grab all the addresses in the book, and send out infected emails USING the stolen addresses? So, if I'm in Stephen or Frankie's address books, I'm safe (because they use Linux, and NOT Outlook, or Outlook Express! Right Guys??). But if I'm in someone else's address book, and that address book is the ill-concieved Windows Address Book, infected emails will not only be sent to me, but can also be sent to others USING my address, and NOT the address of the originating user. So, John Smith ( not his real name ) could have me in his WAB (Windows Address Book), Sobig could infect his system, because John is narrow-minded, and still uses Windows (IMHO), and an infected email could be sent from his PC using MY address as the From address, when in fact it's John's ( that lazy ba$tard - I'll fix him for this, I swear!) PC that the virus and email came from! End result? I get dumped on by 300 recipients ( See my reference to John's heritage above ), who think I sent it, and I may even get crapped on by John ( who I've just taken a contract out on at this point! ), because some other idiot in his address book, got infected, and had John's address in his book, but the virus used my email address and sent it BACK to John! Needless to say, John's day's are numbered at this point, and I wouldn't want to be in his shoes when Guido (also not his real name) shows up with a small-calibre, silencer-equipped handgun, and ventilates John, after which the party starts at my place! And you wonder why people on this list use linux? It's because we need to save our money so we can pay guys like Guido to take care of all the John's in this world! Ok, so like I was saying,...If someone has already mentioned this kind of thing in the Virus-related posts to the list then please ingore this diatribe. But John? You better start running, buddy! Guido's coming! Did that help at all? Grin! Grin! Lanman Now, Now, Lany, We must be more careful what we are saying , because that John he's not a Windblows user, wouldn't dream of letting his friend Lanny get infected by a windblows virus, and he's the kind of guy that has Guido's of his own. John -- John Richard Smith [EMAIL PROTECTED] Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
Holy Smokes! John! Sorry! Totally forgot you're on the list! I was just looking for a generic name, er... um,...OH! Hell! Doesn't matter how I try to say it, this is going to come out wrong. Probably should have used John Doe? Apologies John! It was a total coincidence! Really! Damn! Am I feeling like a dweeb or what ? My Bad. Yup! Lanman pulled a Boo Boo! Well, if you're going to screw up,.might as well be a good one! Excuse me everyone, I have to go crawl under a rock now! Doh! Lanman ( Slithers away to find an appropriate rock ). *** REPLY SEPARATOR *** On 9/8/2003 at 11:20 AM John Richard Smith wrote: Lanman wrote: AAAarrghghghghgh! Frankie? Did you have to do that? Now that Stephen knows that we appreciate common sense we'll never get a decent day's work out of him. Damn! Welcome to Stephen, The Next Generation ! LOL! But since we're on the subject of viruses, and since I've been way to busy to read every single last post on this subject, I'd like to ask one thing. Has anyone told the list that an infected email received on this list may not have come from the person named? These types of viruses will (if activated on a WinBlow$-handicapped system), will run to the address book, grab all the addresses in the book, and send out infected emails USING the stolen addresses? So, if I'm in Stephen or Frankie's address books, I'm safe (because they use Linux, and NOT Outlook, or Outlook Express! Right Guys??). But if I'm in someone else's address book, and that address book is the ill-concieved Windows Address Book, infected emails will not only be sent to me, but can also be sent to others USING my address, and NOT the address of the originating user. So, John Smith ( not his real name ) could have me in his WAB (Windows Address Book), Sobig could infect his system, because John is narrow-minded, and still uses Windows (IMHO), and an infected email could be sent from his PC using MY address as the From address, when in fact it's John's ( that lazy ba$tard - I'll fix him for this, I swear!) PC that the virus and email came from! End result? I get dumped on by 300 recipients ( See my reference to John's heritage above ), who think I sent it, and I may even get crapped on by John ( who I've just taken a contract out on at this point! ), because some other idiot in his address book, got infected, and had John's address in his book, but the virus used my email address and sent it BACK to John! Needless to say, John's day's are numbered at this point, and I wouldn't want to be in his shoes when Guido (also not his real name) shows up with a small-calibre, silencer-equipped handgun, and ventilates John, after which the party starts at my place! And you wonder why people on this list use linux? It's because we need to save our money so we can pay guys like Guido to take care of all the John's in this world! Ok, so like I was saying,...If someone has already mentioned this kind of thing in the Virus-related posts to the list then please ingore this diatribe. But John? You better start running, buddy! Guido's coming! Did that help at all? Grin! Grin! Lanman Now, Now, Lany, We must be more careful what we are saying , because that John he's not a Windblows user, wouldn't dream of letting his friend Lanny get infected by a windblows virus, and he's the kind of guy that has Guido's of his own. John -- John Richard Smith [EMAIL PROTECTED] Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
On Mon, 08 Sep 2003 06:11:08 -0400 Lanman [EMAIL PROTECTED] uttered: You won't find him in the archives. He was fictitious. Got into the beer a bit this weekend did we Joe? LOL! Oh, you betcha! -- HaywireMac Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
HaywireMac wrote: On Sun, 07 Sep 2003 12:34:27 -0400 Lanman [EMAIL PROTECTED] uttered: John? You better start running, buddy! Guido's coming! Searching the archives (away for most of the weekend, sorry), I can't figure out, who this John guy is you want dead so bad I hear d John's got a real good buddy called zippio who's got connections, and he told me he's gonna make him an offer he cannt' refuse. John -- John Richard Smith [EMAIL PROTECTED] Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
Lanman wrote: Holy Smokes! John! Sorry! Totally forgot you're on the list! I was just looking for a generic name, er... um,...OH! Hell! Doesn't matter how I try to say it, this is going to come out wrong. Probably should have used John Doe? Apologies John! It was a total coincidence! Really! Damn! Am I feeling like a dweeb or what ? My Bad. Yup! Lanman pulled a Boo Boo! Well, if you're going to screw up,.might as well be a good one! Excuse me everyone, I have to go crawl under a rock now! Doh! Lanman ( Slithers away to find an appropriate rock ). *** REPLY SEPARATOR *** Don't worry about it, good for a laugh ! John -- John Richard Smith [EMAIL PROTECTED] Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
I've been told that before! Still feeling like a dweeb though! Can't believe howobvious that should have been! Next time I'll use Joe Hill, or, no, wait a minute,...can't do tht, No! I've got it! Stephen K,...No! Can't use that one, Hmmm,,, UM, ER Bill Gates? Yeah No! No ! Wait! Darl McBride! Yes! I'm OK now! Thanks! P.S., How's the light outside? Can't see much daylight from under this rock. Lanman *** REPLY SEPARATOR *** On 9/8/2003 at 3:06 PM John Richard Smith wrote: Lanman wrote: Holy Smokes! John! Sorry! Totally forgot you're on the list! I was just looking for a generic name, er... um,...OH! Hell! Doesn't matter how I try to say it, this is going to come out wrong. Probably should have used John Doe? Apologies John! It was a total coincidence! Really! Damn! Am I feeling like a dweeb or what ? My Bad. Yup! Lanman pulled a Boo Boo! Well, if you're going to screw up,.might as well be a good one! Excuse me everyone, I have to go crawl under a rock now! Doh! Lanman ( Slithers away to find an appropriate rock ). *** REPLY SEPARATOR *** Don't worry about it, good for a laugh ! John -- John Richard Smith [EMAIL PROTECTED] Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] Virus - let's go over this again, shall we?
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Stephen Kuhn Sent: Sunday, 7 September 2003 10:30 PM To: Mandrake Newbie Subject: [newbie] Virus - let's go over this again, shall we? I really hate having to go over this subject again and again and again, but there has to be some understanding and education for those that really don't understand the nature of writing a virus/trojan/script. As of the past few weeks, we've all see SoBig and Blaster bouncing around - ok - so that's not news; however, the understanding must be solid in as much as the bugs MIGHT get relayed to Windows machines from unix/linux machines, but the unix/linux machines are in no way affected; the spread is mostly through email - or relaying through an email server; the bugs cannot be propogated in unix/linux as there is no means by which they can operate. It is inherently COMPLEX to write a trojan/script/virus for unix/linux or MacOS 10 - and no matter how wide-spread the usage of unix/linux or MacOS 10, the intricacies and level of skill and understanding are in themselves prohibitive; the people that are capable of even doing so are being paid large sums of money to do real work and they would barely have the time to dedicate to such a task - and a task it would be. Just due to the absolute nature of the unix/linux/bsd/Mac OS/X operating system(s) it's hard to even create something based solely on social engineering as programs/scripts cannot be run in the same manner as on a Windows based OS. So, in essence, no matter how wide spread linux gets, it's going to be a tad bit more than plain out and out difficult to create the same type of annoyances that are currently plaguing the Windows-world - and if you don't believe what I'm stating here in plain English, please by all means, read up on the subject - visit all the hack sites, dig into the complexities of writing nasties for linux - then you'll come to understand what I'm spewing here. /rant FRANKI: Stephen, this new thing of yours.. making sense and stuff.. is very good, you should go with that more often :-) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] Virus - let's go over this again, shall we?
AAAarrghghghghgh! Frankie? Did you have to do that? Now that Stephen knows that we appreciate common sense we'll never get a decent day's work out of him. Damn! Welcome to Stephen, The Next Generation ! LOL! But since we're on the subject of viruses, and since I've been way to busy to read every single last post on this subject, I'd like to ask one thing. Has anyone told the list that an infected email received on this list may not have come from the person named? These types of viruses will (if activated on a WinBlow$-handicapped system), will run to the address book, grab all the addresses in the book, and send out infected emails USING the stolen addresses? So, if I'm in Stephen or Frankie's address books, I'm safe (because they use Linux, and NOT Outlook, or Outlook Express! Right Guys??). But if I'm in someone else's address book, and that address book is the ill-concieved Windows Address Book, infected emails will not only be sent to me, but can also be sent to others USING my address, and NOT the address of the originating user. So, John Smith ( not his real name ) could have me in his WAB (Windows Address Book), Sobig could infect his system, because John is narrow-minded, and still uses Windows (IMHO), and an infected email could be sent from his PC using MY address as the From address, when in fact it's John's ( that lazy ba$tard - I'll fix him for this, I swear!) PC that the virus and email came from! End result? I get dumped on by 300 recipients ( See my reference to John's heritage above ), who think I sent it, and I may even get crapped on by John ( who I've just taken a contract out on at this point! ), because some other idiot in his address book, got infected, and had John's address in his book, but the virus used my email address and sent it BACK to John! Needless to say, John's day's are numbered at this point, and I wouldn't want to be in his shoes when Guido (also not his real name) shows up with a small-calibre, silencer-equipped handgun, and ventilates John, after which the party starts at my place! And you wonder why people on this list use linux? It's because we need to save our money so we can pay guys like Guido to take care of all the John's in this world! Ok, so like I was saying,...If someone has already mentioned this kind of thing in the Virus-related posts to the list then please ingore this diatribe. But John? You better start running, buddy! Guido's coming! Did that help at all? Grin! Grin! Lanman *** REPLY SEPARATOR *** On 9/7/2003 at 11:32 PM Frankie wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Stephen Kuhn Sent: Sunday, 7 September 2003 10:30 PM To: Mandrake Newbie Subject: [newbie] Virus - let's go over this again, shall we? I really hate having to go over this subject again and again and again, but there has to be some understanding and education for those that really don't understand the nature of writing a virus/trojan/script. As of the past few weeks, we've all see SoBig and Blaster bouncing around - ok - so that's not news; however, the understanding must be solid in as much as the bugs MIGHT get relayed to Windows machines from unix/linux machines, but the unix/linux machines are in no way affected; the spread is mostly through email - or relaying through an email server; the bugs cannot be propogated in unix/linux as there is no means by which they can operate. It is inherently COMPLEX to write a trojan/script/virus for unix/linux or MacOS 10 - and no matter how wide-spread the usage of unix/linux or MacOS 10, the intricacies and level of skill and understanding are in themselves prohibitive; the people that are capable of even doing so are being paid large sums of money to do real work and they would barely have the time to dedicate to such a task - and a task it would be. Just due to the absolute nature of the unix/linux/bsd/Mac OS/X operating system(s) it's hard to even create something based solely on social engineering as programs/scripts cannot be run in the same manner as on a Windows based OS. So, in essence, no matter how wide spread linux gets, it's going to be a tad bit more than plain out and out difficult to create the same type of annoyances that are currently plaguing the Windows-world - and if you don't believe what I'm stating here in plain English, please by all means, read up on the subject - visit all the hack sites, dig into the complexities of writing nasties for linux - then you'll come to understand what I'm spewing here. /rant FRANKI: Stephen, this new thing of yours.. making sense and stuff.. is very good, you should go with that more often :-) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?u
But since we're on the subject of viruses, and since I've been way to busy to read every single last post on this subject, I'd like to ask one thing. Has anyone told the list that an infected email received on this list may not have come from the person named? These types of viruses will (if activated on a Well yep. That's a given. FWIW 2 SoBig's have just come through on newbie. Spamassassin is clever enough now to automatically put them in my caughtspam file - but I've seen no less than seven of these come through over the past few days. One of the last two had a return address of juno.com. They're all about the same simes - some 1700 lines. So, if I'm in Stephen or Frankie's address books, I'm safe (because they use Linux, and NOT Outlook, or Outlook Express! Well, that's the way these things propagate. I don't use address books at home. I just remember the address of whom I'm sending :). Or maybe kmail remembers it for me, since I can type the first few letters of the email address and it supplies the rest. People using Outhouse tend to keep a lot of email addresses in the contacts folders - especially if they're at work. Those lists do come in handy, and keeping all the data for your biz partners is certainly useful -- but that is how these things spread. The worm contacts every email address in the contact list, then goes to the other pc, where it contacts everyone in that list, and so on. And eventually it hit someone using Outhouse that had [EMAIL PROTECTED] mandrake.com in the list. So two morals -- don't use Outhouse, and don't put mailing list email addresses in your contacts. Needless to say, John's day's are numbered at this point, and I wouldn't want to be in his shoes when Guido (also not his real Shit, that's what the Windows users are doing now. Paying for protection. Guido == McAfee in this instance. Lanman David E. Fox Thanks for letting me [EMAIL PROTECTED]change magnetic patterns [EMAIL PROTECTED] on your hard disk. --- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?u
On Sun, 2003-09-07 at 12:51, David E. Fox wrote: Shit, that's what the Windows users are doing now. Paying for protection. Guido == McAfee in this instance. you know, I would not want to be a manager for McAfee tho... trying to 'work with M$' on a Corp. level must be a real nerve racking experience. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] Virus - let's go over this again, shall we?u
My question is how in gods name was sobigs smtp engine able to send mail to the list? I ask because if it doesn't resolve the IP, mandrakes sympa won't accept the post.. I am guessing that sobig uses the SMTP server of the infected lookout rgds Franki Mandrake Gamers mailing list: htmlfixit.com/mailman/listinfo/mandrake-games HTML Perl PHP n stuff.. htmlfixit.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David E. Fox Sent: Monday, 8 September 2003 12:52 AM To: [EMAIL PROTECTED] Subject: Re: [newbie] Virus - let's go over this again, shall we?u But since we're on the subject of viruses, and since I've been way to busy to read every single last post on this subject, I'd like to ask one thing. Has anyone told the list that an infected email received on this list may not have come from the person named? These types of viruses will (if activated on a Well yep. That's a given. FWIW 2 SoBig's have just come through on newbie. Spamassassin is clever enough now to automatically put them in my caughtspam file - but I've seen no less than seven of these come through over the past few days. One of the last two had a return address of juno.com. They're all about the same simes - some 1700 lines. So, if I'm in Stephen or Frankie's address books, I'm safe (because they use Linux, and NOT Outlook, or Outlook Express! Well, that's the way these things propagate. I don't use address books at home. I just remember the address of whom I'm sending :). Or maybe kmail remembers it for me, since I can type the first few letters of the email address and it supplies the rest. People using Outhouse tend to keep a lot of email addresses in the contacts folders - especially if they're at work. Those lists do come in handy, and keeping all the data for your biz partners is certainly useful -- but that is how these things spread. The worm contacts every email address in the contact list, then goes to the other pc, where it contacts everyone in that list, and so on. And eventually it hit someone using Outhouse that had [EMAIL PROTECTED] mandrake.com in the list. So two morals -- don't use Outhouse, and don't put mailing list email addresses in your contacts. Needless to say, John's day's are numbered at this point, and I wouldn't want to be in his shoes when Guido (also not his real Shit, that's what the Windows users are doing now. Paying for protection. Guido == McAfee in this instance. Lanman David E. Fox Thanks for letting me [EMAIL PROTECTED]change magnetic patterns [EMAIL PROTECTED] on your hard disk. --- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] Virus - let's go over this again, shall we?u
Makes Sense Frankie! *** REPLY SEPARATOR *** On 9/8/2003 at 1:02 AM Frankie wrote: My question is how in gods name was sobigs smtp engine able to send mail to the list? I ask because if it doesn't resolve the IP, mandrakes sympa won't accept the post.. I am guessing that sobig uses the SMTP server of the infected lookout rgds Franki Mandrake Gamers mailing list: htmlfixit.com/mailman/listinfo/mandrake-games HTML Perl PHP n stuff.. htmlfixit.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David E. Fox Sent: Monday, 8 September 2003 12:52 AM To: [EMAIL PROTECTED] Subject: Re: [newbie] Virus - let's go over this again, shall we?u But since we're on the subject of viruses, and since I've been way to busy to read every single last post on this subject, I'd like to ask one thing. Has anyone told the list that an infected email received on this list may not have come from the person named? These types of viruses will (if activated on a Well yep. That's a given. FWIW 2 SoBig's have just come through on newbie. Spamassassin is clever enough now to automatically put them in my caughtspam file - but I've seen no less than seven of these come through over the past few days. One of the last two had a return address of juno.com. They're all about the same simes - some 1700 lines. So, if I'm in Stephen or Frankie's address books, I'm safe (because they use Linux, and NOT Outlook, or Outlook Express! Well, that's the way these things propagate. I don't use address books at home. I just remember the address of whom I'm sending :). Or maybe kmail remembers it for me, since I can type the first few letters of the email address and it supplies the rest. People using Outhouse tend to keep a lot of email addresses in the contacts folders - especially if they're at work. Those lists do come in handy, and keeping all the data for your biz partners is certainly useful -- but that is how these things spread. The worm contacts every email address in the contact list, then goes to the other pc, where it contacts everyone in that list, and so on. And eventually it hit someone using Outhouse that had [EMAIL PROTECTED] mandrake.com in the list. So two morals -- don't use Outhouse, and don't put mailing list email addresses in your contacts. Needless to say, John's day's are numbered at this point, and I wouldn't want to be in his shoes when Guido (also not his real Shit, that's what the Windows users are doing now. Paying for protection. Guido == McAfee in this instance. Lanman David E. Fox Thanks for letting me [EMAIL PROTECTED]change magnetic patterns [EMAIL PROTECTED] on your hard disk. --- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?u
What's the IP got to do with the validation? If the IP was used for validation then users with DHCP accounts would not be able to join the list because there is no guarantee the user's IP would remain the same between postings. Frankie wrote: My question is how in gods name was sobigs smtp engine able to send mail to the list? I ask because if it doesn't resolve the IP, mandrakes sympa won't accept the post.. I am guessing that sobig uses the SMTP server of the infected lookout rgds Franki Mandrake Gamers mailing list: htmlfixit.com/mailman/listinfo/mandrake-games HTML Perl PHP n stuff.. htmlfixit.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David E. Fox Sent: Monday, 8 September 2003 12:52 AM To: [EMAIL PROTECTED] Subject: Re: [newbie] Virus - let's go over this again, shall we?u But since we're on the subject of viruses, and since I've been way to busy to read every single last post on this subject, I'd like to ask one thing. Has anyone told the list that an infected email received on this list may not have come from the person named? These types of viruses will (if activated on a Well yep. That's a given. FWIW 2 SoBig's have just come through on newbie. Spamassassin is clever enough now to automatically put them in my caughtspam file - but I've seen no less than seven of these come through over the past few days. One of the last two had a return address of juno.com. They're all about the same simes - some 1700 lines. So, if I'm in Stephen or Frankie's address books, I'm safe (because they use Linux, and NOT Outlook, or Outlook Express! Well, that's the way these things propagate. I don't use address books at home. I just remember the address of whom I'm sending :). Or maybe kmail remembers it for me, since I can type the first few letters of the email address and it supplies the rest. People using Outhouse tend to keep a lot of email addresses in the contacts folders - especially if they're at work. Those lists do come in handy, and keeping all the data for your biz partners is certainly useful -- but that is how these things spread. The worm contacts every email address in the contact list, then goes to the other pc, where it contacts everyone in that list, and so on. And eventually it hit someone using Outhouse that had [EMAIL PROTECTED] mandrake.com in the list. So two morals -- don't use Outhouse, and don't put mailing list email addresses in your contacts. Needless to say, John's day's are numbered at this point, and I wouldn't want to be in his shoes when Guido (also not his real Shit, that's what the Windows users are doing now. Paying for protection. Guido == McAfee in this instance. Lanman David E. Fox Thanks for letting me [EMAIL PROTECTED]change magnetic patterns [EMAIL PROTECTED] on your hard disk. --- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com -- David Filion V.P. Technology Maximum Lans Inc. [EMAIL PROTECTED] (514) 489-7825 6915 Fielding Ave. Suite # 228 Montreal, Quebec, H4V 1P4 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
Lanman wrote: history of criminal activity snipped Ok, so like I was saying,...If someone has already mentioned this kind of thing in the Virus-related posts to the list then please ingore this diatribe. But John? You better start running, buddy! Guido's coming! Did that help at all? Grin! Grin! Lanman Can you send me Guido's phone number? I have some friends I'd like him to meet... ;-) Margot Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] Virus - let's go over this again, shall we?u
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David Filion What's the IP got to do with the validation? If the IP was used for validation then users with DHCP accounts would not be able to join the list because there is no guarantee the user's IP would remain the same between postings. FRANKI: No, users with DHCP usually have their ISP's mail server send the actual mail, those that don't need to have a dynamic DNS setup that changes each time they get a new IP address.. If you setup postfix on a dynamic IP machine and set it up to mail directly to the sympa servers instead of using a relay SMTP server, sympa will not accept the mail because the IP does't resolve back to the Domain name.. trust me, I have had this problem in the past.. its a pain, but it stops the spammers dead cold. rgds Franki Mandrake Gamers mailing list: htmlfixit.com/mailman/listinfo/mandrake-games HTML Perl PHP n stuff.. htmlfixit.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
On Sun, 2003-09-07 at 11:16, Margot wrote: Lanman wrote: history of criminal activity snipped Ok, so like I was saying,...If someone has already mentioned this kind of thing in the Virus-related posts to the list then please ingore this diatribe. But John? You better start running, buddy! Guido's coming! Did that help at all? Grin! Grin! Lanman Can you send me Guido's phone number? I have some friends I'd like him to meet... ;-) Hinm and his brother Nuncenio, Guido is the REASONABLE one Margot __ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?u
Frankie wrote: FRANKI: No, users with DHCP usually have their ISP's mail server send the actual mail, Correct. those that don't need to have a dynamic DNS setup that changes each time they get a new IP address.. If you setup postfix on a dynamic IP machine and set it up to mail directly to the sympa servers instead of using a relay SMTP server, sympa will not accept the mail because the IP does't resolve back to the Domain name.. Now I understand what you ment. -- David Filion Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?
On Sun, 2003-09-07 at 14:16, Margot wrote: Lanman wrote: history of criminal activity snipped Ok, so like I was saying,...If someone has already mentioned this kind of thing in the Virus-related posts to the list then please ingore this diatribe. But John? You better start running, buddy! Guido's coming! Did that help at all? Grin! Grin! Lanman Can you send me Guido's phone number? I have some friends I'd like him to meet... ;-) Margot you already have his e-mail,,, just post it to this list, or /. __ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com -- ++ Mandrake HowTo's More: http://twiki.mdklinuxfaq.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?u
On Sunday 07 September 2003 01:01 pm, ed tharp wrote: On Sun, 2003-09-07 at 12:51, David E. Fox wrote: Shit, that's what the Windows users are doing now. Paying for protection. Guido == McAfee in this instance. you know, I would not want to be a manager for McAfee tho... trying to 'work with M$' on a Corp. level must be a real nerve racking experience. I wouldn't want to be working for McAfee now that MS has announced that they are getting into the Anti-Virus business. Third party developers who compete against MS don't have a sterling track record of doing well on that end of competition. Although, the irony is that MS selling Anti-Virus software is sort of like the Mafia selling insurance against extortion. -- Bryan Phinney Software Test Engineer Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?u
rikona wrote: Hello David, Sunday, September 7, 2003, 9:51:37 AM, you wrote: DEF So two morals -- don't use Outhouse, and don't put mailing list DEF email addresses in your contacts. If you don't use OE, then it might be OK to use a contact list. For example, TheBat email client uses its own list, in a different format, and in a different place - TheBat does NOT use any Win components. A virus looking for the Win address book will find it in the usual place, but it has nothing in it. :-) Make sure NO Win components get used, and you'll be much better off. I'll agree that your safer off. There are still two dangers though: 1) That the virus writer included the ability to read multiple forms of address books. 2) The person that receives the email is lacking some form of gelatinous mass between their ears and runs the infected attachment. In most cases your right, the chance of option number 1 is slight. Option number 2 on the other hand, seems to be more common. LOL. Personally, I migrated all my contacts to LDAP and use Thunderbird. No address book and no OE, no problems. -- David Filion Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Virus - let's go over this again, shall we?u
Although, the irony is that MS selling Anti-Virus software is sort of like the Mafia selling insurance against extortion. Yeah, no kidding! So are we going to see more holes for virii now that they will benefit from the FUD? -- Mandrake HowTo's More: http://twiki.mdklinuxfaq.org Join the content organization discussion: http://mandrake.vmlinuz.ca/bin/view/Main/NewIndex Join the General Wiki Development discussion: http://mandrake.vmlinuz.ca/bin/view/Main/DevelopingTheMandrakeCommunity#Discussion Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] Virus - let's go over this again, shall we?
On Mon, 2003-09-08 at 01:32, Frankie wrote: Stephen, this new thing of yours.. making sense and stuff.. is very good, you should go with that more often :-) ...but it drains my creative juices mate...really bad...takes me weeks to get over it... stephen kuhn - owner == illawarra computer services a kuhn media australia company http://kma.0catch.com -- * This message was composed on a 100% Microsoft free computer * We expressly refuse to utilise Microsoft DRM encoded documents -- JOHN PAUL ELECTED POPE!! (George and Ringo miffed.) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
RE: [newbie] Virus - let's go over this again, shall we?
Phew! So there's still hope?? Grin! Grin! Lanman *** REPLY SEPARATOR *** On 9/8/2003 at 8:37 AM Stephen Kuhn wrote: On Mon, 2003-09-08 at 01:32, Frankie wrote: Stephen, this new thing of yours.. making sense and stuff.. is very good, you should go with that more often :-) ...but it drains my creative juices mate...really bad...takes me weeks to get over it... stephen kuhn - owner == illawarra computer services a kuhn media australia company http://kma.0catch.com -- * This message was composed on a 100% Microsoft free computer * We expressly refuse to utilise Microsoft DRM encoded documents -- JOHN PAUL ELECTED POPE!! (George and Ringo miffed.) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
