Subj : Ddge 3.99/SR9/SR16 released and avai
To : mark lewis
From : Nicholas Boel
Date : Thu Dec 14 2017 03:10 pm
Hello mark,
On Thu Dec 14 2017 01:50:00, mark lewis wrote to Nicholas Boel:
NB>> And an honest answer in question form: How do you know every
NB>> intermediate point is clean and clear of virus injection of any
NB>> kind?
ml> really? when is the last time you've seen a virus inject itself into
ml> binaries inside a zip file? are you in the habit of unzipping the
ml> files where a virus can find the binaries and infest them? think about
ml> it...
Quite a few BBS softwares have an upload checker, which extracts a zip file and
injects whatever the sysop defines into it. Think about it.
ml> and if you miss then you are *that* one... especially if your chosen
ml> tool(s) don't detect something nefarious... the real ugly is that
ml> because you made the effort and missed, it is your responsibility...
ml> this is on the same lines as those ""legal notices"" posted on some
ml> BBSes where they say they will read every message posted looking for
ml> illegal activities... that puts them in legal hot water if they miss
ml> something... better to not do it at all and be safe... besides,
ml> there's no way to find all possible hidden messages within posts...
ml> that's a chase game just like virus scanning is a chase game... you'll
ml> never know you had it until it bites you...
I knew you would veer off on a tangent with this. I'll check the files on my
own system, with or without your say-so. Thanks though!
Regards,
Nick
... "Не знаю. Я здесь только работаю."
--- GoldED+/LNX 1.1.5-b20170303
* Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)
