Re: Why such volume with W32/Swen@MM?

2003-09-25 Thread Pigeon
On Sun, Sep 21, 2003 at 08:15:53PM -0700, Kevin Buhr wrote: > Bill Moseley <[EMAIL PROTECTED]> writes: > > > > I'm curious why I'm getting so many of these viruses sent to me. On > > various technical lists I've read of lots of people that are getting > > hammered by the mail, too. > > At least o

Re: Why such volume with W32/Swen@MM?

2003-09-25 Thread Jacob Anawalt
ScruLoose said: > On Wed, Sep 24, 2003 at 09:33:56PM -0400, ScruLoose wrote: >> On Mon, Sep 22, 2003 at 03:54:08PM -0600, Monique Y. Herman wrote: >> > >> > I've heard that using html encoding for the @ symbol on webpages will >> > reduce harvesting ... it still shows up properly in mail clients w

Re: Why such volume with W32/Swen@MM?

2003-09-24 Thread Bijan Soleymani
On Wed, Sep 24, 2003 at 09:33:56PM -0400, ScruLoose wrote: > I have a mailto using a little Javascript that I got here: > http://innerpeace.org/escrambler.shtml > which works beautifully, though only for people who have JavaScript > enabled on their browser. I have my address published on my webs

Re: Why such volume with W32/Swen@MM?

2003-09-24 Thread ScruLoose
On Wed, Sep 24, 2003 at 09:33:56PM -0400, ScruLoose wrote: > On Mon, Sep 22, 2003 at 03:54:08PM -0600, Monique Y. Herman wrote: > > > > I've heard that using html encoding for the @ symbol on webpages will > > reduce harvesting ... it still shows up properly in mail clients when > > the user clicks

Re: Why such volume with W32/Swen@MM?

2003-09-24 Thread ScruLoose
On Mon, Sep 22, 2003 at 03:54:08PM -0600, Monique Y. Herman wrote: > On Monday, September 22 at 4:42 pm, Jeff Elkins penned the following: > > > >Nor has mine. But my wife does not do listservs or webforums. Nor does > >she publish her email, as I have at http://www.lewrockwell.com > > > >It's a

Re: Why such volume with W32/Swen@MM?

2003-09-24 Thread Monique Y. Herman
On Monday, September 22 at 4:42 pm, Jeff Elkins penned the following: Nor has mine. But my wife does not do listservs or webforums. Nor does she publish her email, as I have at http://www.lewrockwell.com It's a price you pay for being public... Jeff I've heard that using html encoding for the

Re: Why such volume with W32/Swen@MM?

2003-09-22 Thread Jeff Elkins
On Monday 22 September 2003 3:43 pm, Ron Johnson wrote: >My wife uses Linux, but hasn't (yet?) gotten any swen attachments. Nor has mine. But my wife does not do listservs or webforums. Nor does she publish her email, as I have at http://www.lewrockwell.com It's a price you pay for being public.

Re: Why such volume with W32/Swen@MM?

2003-09-22 Thread Ismael Valladolid Torres
El domingo, 21 de septiembre de 2003, a las 21:04, Pigeon escribe: > Me too. Especially as most spam I get has got my address from > debian-user or other Linux lists, and I've been getting a lot less > "ordinary" spam since swen started up. I am receiving also these emails to an account subscribed

Re: Why such volume with W32/Swen@MM?

2003-09-22 Thread Ismael Valladolid Torres
El lunes, 22 de septiembre de 2003, a las 09:44, Elie De Brauwer escribe: > my girlfriends email accounts gets nothing Give me your girlfriend's email address, and I will see what I can do... :o) Regards, Ismael -- "Tout fourmille de commentaries; d'autheurs il en est grande cherté" signature.

Re: Why such volume with W32/Swen@MM?

2003-09-22 Thread Ron Johnson
On Mon, 2003-09-22 at 05:41, Stefan Waidele jun. wrote: > [EMAIL PROTECTED] wrote: > > On Sun, Sep 21, 2003 at 10:03:41AM +0100, Clive Menzies wrote: > > > > > >>I've just received one with what looks like all the debian-powerpc list > >>addresses in the "To" header. So it does look as though th

Re: Why such volume with W32/Swen@MM?

2003-09-22 Thread Greg Folkert
On Mon, 2003-09-22 at 07:51, Elie De Brauwer wrote: > On Monday 22 September 2003 12:41, Stefan Waidele jun. wrote: > > [EMAIL PROTECTED] wrote: > > > On Sun, Sep 21, 2003 at 10:03:41AM +0100, Clive Menzies wrote: > > >>I've just received one with what looks like all the debian-powerpc list > > >>a

Re: Why such volume with W32/Swen@MM?

2003-09-22 Thread Elie De Brauwer
On Monday 22 September 2003 12:41, Stefan Waidele jun. wrote: > [EMAIL PROTECTED] wrote: > > On Sun, Sep 21, 2003 at 10:03:41AM +0100, Clive Menzies wrote: > >>I've just received one with what looks like all the debian-powerpc list > >>addresses in the "To" header. So it does look as though they a

Re: Why such volume with W32/Swen@MM?

2003-09-22 Thread Stefan Waidele jun.
[EMAIL PROTECTED] wrote: On Sun, Sep 21, 2003 at 10:03:41AM +0100, Clive Menzies wrote: I've just received one with what looks like all the debian-powerpc list addresses in the "To" header. So it does look as though they are harvesting the Debian lists. [...] To be cynical, a Windows virus would

Re: Why such volume with W32/Swen@MM?

2003-09-22 Thread Elie De Brauwer
On Monday 22 September 2003 07:19, cr wrote: > On Monday 22 September 2003 02:42, [EMAIL PROTECTED] wrote: > > On Sun, Sep 21, 2003 at 10:03:41AM +0100, Clive Menzies wrote: > > > I've just received one with what looks like all the debian-powerpc list > > > addresses in the "To" header. So it does

Re: Why such volume with W32/Swen@MM?

2003-09-22 Thread Ron Johnson
On Sun, 2003-09-21 at 09:42, [EMAIL PROTECTED] wrote: > On Sun, Sep 21, 2003 at 10:03:41AM +0100, Clive Menzies wrote: [snip] > My wife wants to know *why* people write viruses... For the same reason punks (not Punks) throw rocks off of highway overpasses. --

Re: Why such volume with W32/Swen@MM?

2003-09-22 Thread cr
On Monday 22 September 2003 02:42, [EMAIL PROTECTED] wrote: > On Sun, Sep 21, 2003 at 10:03:41AM +0100, Clive Menzies wrote: > > I've just received one with what looks like all the debian-powerpc list > > addresses in the "To" header. So it does look as though they are > > harvesting the Debian li

Re: Why such volume with W32/Swen@MM?

2003-09-21 Thread Kevin Buhr
Kevin Buhr <[EMAIL PROTECTED]> writes: > > At least one technical description of Swen (which I can no longer > find) states that [ . . . ] Found the reference. See: http://www.f-secure.com/v-descs/swen.shtml under the heading "Spreading in e-mails and to newsgroups", second paragraph.

Re: Why such volume with W32/Swen@MM?

2003-09-21 Thread Kevin Buhr
Bill Moseley <[EMAIL PROTECTED]> writes: > > I'm curious why I'm getting so many of these viruses sent to me. On > various technical lists I've read of lots of people that are getting > hammered by the mail, too. At least one technical description of Swen (which I can no longer find) states that,

Re: Why such volume with W32/Swen@MM?

2003-09-21 Thread Pigeon
On Sun, Sep 21, 2003 at 09:43:01AM -0400, Chad M Stewart wrote: > > I also wonder if some of the zombies that spammers use to blast out > msgs might have been compromised by this virus as well. Me too. Especially as most spam I get has got my address from debian-user or other Linux lists, and I'

Re: Why such volume with W32/Swen@MM?

2003-09-21 Thread moseley
On Sun, Sep 21, 2003 at 10:03:41AM +0100, Clive Menzies wrote: > I've just received one with what looks like all the debian-powerpc list > addresses in the "To" header. So it does look as though they are > harvesting the Debian lists. Mine have had mostly a single To: address. The virus descrip

Re: Why such volume with W32/Swen@MM?

2003-09-21 Thread Chad M Stewart
I'm finding similar things here. I've had my domain a number of years and this is the first time I've been affected by an M$ email worm. Usually I sit back and laugh, but not this time. I'm new to the debian-* lists and recently posted for the first time. All of the copies of the virus have

Re: Why such volume with W32/Swen@MM?

2003-09-21 Thread Ismael Valladolid Torres
El domingo, 21 de septiembre de 2003, a las 13:50, Colin Watson escribe: > With the odd exception, virus developers generally don't seem to be > particularly competent. They usually just tweak other people's recipes > and add a dash of malice. This reminds me of my .procmailrc. ;) Regards, Ismael

Re: Why such volume with W32/Swen@MM?

2003-09-21 Thread Colin Watson
On Sun, Sep 21, 2003 at 11:43:30AM +0200, Ismael Valladolid Torres wrote: > El s?bado, 20 de septiembre de 2003, a las 21:17, Ron Johnson escribe: > > Because billg and his minions are Evil, focusing on money to the > > detriment of technical competence. > > Funny that virus developers are so comp

Re: Why such volume with W32/Swen@MM?

2003-09-21 Thread Ron Johnson
On Sun, 2003-09-21 at 04:43, Ismael Valladolid Torres wrote: > El sábado, 20 de septiembre de 2003, a las 21:17, Ron Johnson escribe: > > Because billg and his minions are Evil, focusing on money to the > > detriment of technical competence. > > Funny that virus developers are so competent, using

Re: Why such volume with W32/Swen@MM?

2003-09-21 Thread Ismael Valladolid Torres
El sábado, 20 de septiembre de 2003, a las 21:17, Ron Johnson escribe: > Because billg and his minions are Evil, focusing on money to the > detriment of technical competence. Funny that virus developers are so competent, using such an uncompetent platform. Regards, Ismael -- "Tout fourmille de c

Re: Why such volume with W32/Swen@MM?

2003-09-21 Thread Clive Menzies
On (21/09/03 00:13), Greg Folkert wrote: > Subject: Re: Why such volume with W32/[EMAIL PROTECTED] > From: Greg Folkert <[EMAIL PROTECTED]> > To: DebianUser list <[EMAIL PROTECTED]> > Date: Sun, 21 Sep 2003 00:13:46 -0400 > > On Sat, 2003-09-20 at 21:49, Bill Moseley wrote: > > I'm curious why I'm

Re: Why such volume with W32/Swen@MM?

2003-09-20 Thread Pigeon
On Sat, Sep 20, 2003 at 06:49:18PM -0700, Bill Moseley wrote: > I'm curious why I'm getting so many of these viruses sent to me. On > various technical lists I've read of lots of people that are getting > hammered by the mail, too. > > From the descriptions I've read of W32/[EMAIL PROTECTED] it m

Re: Why such volume with W32/Swen@MM?

2003-09-20 Thread Greg Folkert
On Sat, 2003-09-20 at 21:49, Bill Moseley wrote: > I'm curious why I'm getting so many of these viruses sent to me. On > various technical lists I've read of lots of people that are getting > hammered by the mail, too. > > >From the descriptions I've read of W32/[EMAIL PROTECTED] it mails itself

Re: Why such volume with W32/Swen@MM?

2003-09-20 Thread Bijan Soleymani
On Sat, Sep 20, 2003 at 11:11:54PM -0400, Carl Fink wrote: > On Sat, Sep 20, 2003 at 06:49:18PM -0700, Bill Moseley wrote: > > > >From the descriptions I've read of W32/[EMAIL PROTECTED] it mails itself to > > "recipients extracted from the victim machine", yet I'm seeing so many > > of these to

Re: Why such volume with W32/Swen@MM?

2003-09-20 Thread Carl Fink
On Sat, Sep 20, 2003 at 06:49:18PM -0700, Bill Moseley wrote: > >From the descriptions I've read of W32/[EMAIL PROTECTED] it mails itself to > "recipients extracted from the victim machine", yet I'm seeing so many > of these to my personal email address alone that I can't believe my > address i

Re: Why such volume with W32/Swen@MM?

2003-09-20 Thread Ron Johnson
On Sat, 2003-09-20 at 20:49, Bill Moseley wrote: > I'm curious why I'm getting so many of these viruses sent to me. Because billg and his minions are Evil, focusing on money to the detriment of technical competence. With their lock on OEMs, if MS had focused even a little bit on security, Linux w

Why such volume with W32/Swen@MM?

2003-09-20 Thread Bill Moseley
I'm curious why I'm getting so many of these viruses sent to me. On various technical lists I've read of lots of people that are getting hammered by the mail, too. >From the descriptions I've read of W32/[EMAIL PROTECTED] it mails itself to "recipients extracted from the victim machine", yet I'm