-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Graham,

On 26 September 2000 at 19:02:10 GMT +0100 (which was 19:02 where I
live) Graham wrote and made these points on the subject
of "Security Vulnerabilities In The Bat???":

>> Im currently reading Bruce Schneier's new book "Secrets & Lies."  On page
>> 3, in the listing of "software vulnerabilities reported during March
>> 2000" is
>>
>> "Several vulnerabilities were discovered in the e-mail client The Bat!,
>> allowing an attacker to steal files from users' computers."
>>
>> It doesn't give any additional information about this, but I would think
>> that The Bat! users would want to find out more about this.

G> Has anybody heard anything of this?

Yes.  It was a misunderstanding of the X-BAT-FILES header usage at the
time  and,  since  then and in response to the criticism, Stef and Max
changed the header.

Does anyone remember the exact details on this one?

- --
Cheers,
.\\arck
 ________________________________________________________________
[    Marck D. Pearlstone | Moderator TBUDL / TBBETA              ]
[ PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com      ]
[ PGP Key: <mailto:[EMAIL PROTECTED]?Body=GET%20MARCKKEY> ]

 Headline - If Strike isn't Settled Quickly, It May Last a While
 ________________________________________________________________
 TB! v1.46d S/N 14F4B4B2 on Windows 98 4.10 Build 2222  A

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8 Secured
Comment: PGP Sealed for freshness!

iQA/AwUBOdEHrjnkJKuSnc2gEQL+RACfdl8Aby6E65mOaCH+AlTOGuwXAzAAoKIY
YwRh07RzxRXGb26Lb0FeWE2u
=j5dZ
-----END PGP SIGNATURE-----

-- 
--------------------------------------------------------------
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
   <mailto:[EMAIL PROTECTED]>
To Unsubscribe from TBUDL, double click here and send the message:
   <mailto:[EMAIL PROTECTED]>
--------------------------------------------------------------

You are subscribed as : archive@jab.org


Reply via email to