[Xitami] 3

Brian {Hamilton Kelly} xitami@lists.xitami.org
Tue, 25 Sep 2001 18:49:24 +0100


In message <20010923010907.AE6941C7F49E1@smtp.163.com> "3" writes:
[snipped]

Brilliant!  Now the list is permitting through Base64 encoded HTML
containing a malicious VBScript.  (Doesn't affect me, since I'm running
OS/2, and read my mail in a simple DOS mail reader; however, it might
well cause problems to the OS-challenged.)

I've suggested before that the list ought automatically to drop posts
which are multipart/alternative.  Could I now extend that to ban ANYTHING
that isn't just PLAIN ASCII text.

It's easy enough to write a filter that preprocesses traffic before the
exploder stage, reads the (MIME) headers, and bounces unwelcome traffic
back to sender.

Look out for more of these, as folks running Windoze get infected with
Nimda and other similar viruses, and happen to have the name of the
mailing list in their address books.

-- 
Brian {Hamilton Kelly}                                          bhk@dsl.co.uk
    "We have gone from a world of concentrated knowledge and wisdom to one of
    distributed ignorance.  And we know and understand less while being incr-
    easingly capable."              Prof. Peter Cochrane, formerly of BT Labs