[Dshield] Question about Klez

John Hardin johnh at aproposretail.com
Mon Jul 15 17:07:25 GMT 2002


On Sat, 2002-07-13 at 14:56, Bruce Lilly wrote:
> > From: John Hardin <johnh at aproposretail.com>
> > Date: 12 Jul 2002 08:55:17 -0700
> 
> > It's trivial to prevent. Simply refuse to accept executable attachments
> > as policy.
> 
> That's not trivial.  You have now changed the problem to "determine
> whether content is executable", and there are a number of
> difficulties there, as previously described on this list.

*so far* worms are not being sophisticated about obscuring the content
type. It is, *so far*, still a trivial problem.

-- 
John Hardin                                   <johnh at aproposretail.com>
Internal Systems Administrator                    voice: (425) 672-1304
Apropos Retail Management Systems, Inc.             fax: (425) 672-0192
-----------------------------------------------------------------------
  ...the Fates notice those who buy chainsaws...
                                             -- www.darwinawards.com
-----------------------------------------------------------------------
 2 days until Apropos Forum 2002




More information about the list mailing list