Works for me.  I've never been infected in the last decade and a half. 
And I know how to read, so I don't need (or want) these bells and
whistles going off.  A coworker down the hall and I share amusing
stories about those who do - he keeps reminding me that there are a
bunch of "less security aware" newbies around that keep 'em spreading.

ah well...

V/R

Jim

John Daniele wrote:
> 
> Heh, I guess I didn't read the thread previous to yours.. IMO, that's
> exactly what you should do. Uninterpreted plaintext can rarely hurt you!
> 
> :-)
> 
> ----------------------------------
> John Daniele
> Technical Security & Intelligence
> Toronto, ON
> Voice: (416) 605-2041
> Email: [EMAIL PROTECTED]
> Web:   http://www.tsintel.com
> ----------------------------------
> 
> On Wed, 30 Jan 2002, Meritt James wrote:
> 
> > So why not simply disable the association to interpreters (including
> > VBS, of course) and modifying the configuration of your whatever reader
> > not to do that?
> >
> > John Daniele wrote:
> > >
> > > > Why just don't run emailed executables?
> > >
> > > Because for as long as you are running an email client that interprets
> > > vb/java/lotus/*scripting code, you are at risk. There have been cases
> > > where executable code is automatically run simply by clicking on the
> > > message as opposed to running it manually. I've also seen one one case
> > > where the executable was executed accidently by buggy code implemented
> > > as a part of the email client's export-attachment function.
> > >
> > > ----------------------------------
> > > John Daniele
> > > Technical Security & Intelligence
> > > Toronto, ON
> > > Voice: (416) 605-2041
> > > Email: [EMAIL PROTECTED]
> > > Web:   http://www.tsintel.com
> > > ----------------------------------
> >
> > --
> > James W. Meritt CISSP, CISA
> > Booz | Allen | Hamilton
> > phone: (410) 684-6566
> >

-- 
James W. Meritt CISSP, CISA
Booz | Allen | Hamilton
phone: (410) 684-6566

Reply via email to