ietf
[Top] [All Lists]

Re: FW: Virus alert

2003-09-02 08:51:25
So far I have not seen one case of someone I know informing me that I 
have sent a message to them with a virus included.  They have all been from 
strangers, which is one reason they get trapped by my filters.

As best I can tell, all the to and from addresses are randomly selected.

Cheers...\Stef

At 0:52 +0100 8/31/03, Tim Chown wrote:
On Sat, Aug 30, 2003 at 05:25:19PM -0400, Dean Anderson wrote:

The Virus writer obviously went to some trouble to pick valid addresses.
It stands to reason that they expect that someone is getting mail to these
addresses.  It also stands to reason that the abuser expects those persons
to get Virus notifications.

I don't think so; isn't it more likely the writer wants the infection to
spread, and the best chance for that is that the recipient sees a From:
address that they recognise and "trust", rather than 
kerjregj(_at_)jsfjkh(_dot_)com,
so they look at the content where they otherwise would be wary?

I don't see a problem with notifications where the virus is known not to
forge the sender.

Tim






<Prev in Thread] Current Thread [Next in Thread>