Test

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Test

Brion Vibber
It's the long-awaited film version of the Broadway hit. The  message  sent as  a binary attachment.


_______________________________________________
Wikitech-l mailing list
[hidden email]
http://mail.wikipedia.org/mailman/listinfo/wikitech-l
Reply | Threaded
Open this post in threaded view
|

Re: Test

Brion Vibber
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

For what it's worth,

a) Any attachment nasties from the random virus / worm claiming my name are
stripped automatically.

b) I've now placed my address under moderation for this list. ;)

- -- brion vibber (brion @ pobox.com)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEfUWQwRnhpk1wk44RAnh7AJ9J+N9BSP556dpxrU3uIyC4DzO/vwCg0OoR
TxX9tFq4yb1Hxq/BPLp31Sw=
=QrMt
-----END PGP SIGNATURE-----
_______________________________________________
Wikitech-l mailing list
[hidden email]
http://mail.wikipedia.org/mailman/listinfo/wikitech-l
Reply | Threaded
Open this post in threaded view
|

Re: Test

Jay Ashworth-2
On Wed, May 31, 2006 at 12:28:16AM -0700, Brion Vibber wrote:
> a) Any attachment nasties from the random virus / worm claiming my name are
> stripped automatically.

Don't forget "and writing style".  :-)

> b) I've now placed my address under moderation for this list. ;)

About damn time.  

Cheers,
-- jr 'closed captioned for the humor impaired' a
--
Jay R. Ashworth                                                [hidden email]
Designer                          Baylink                             RFC 2100
Ashworth & Associates        The Things I Think                        '87 e24
St Petersburg FL USA      http://baylink.pitas.com             +1 727 647 1274

     A: Because it messes up the order in which people normally read text.
     Q: Why is top-posting such a bad thing?
     
     A: Top-posting.
     Q: What is the most annoying thing on Usenet and in e-mail?
_______________________________________________
Wikitech-l mailing list
[hidden email]
http://mail.wikipedia.org/mailman/listinfo/wikitech-l
Reply | Threaded
Open this post in threaded view
|

Re: Test

Platonides
In reply to this post by Brion Vibber
When i first read it, the 'Hello' mail i thought it was from the script. Of
course, if it had retained the attachment it'd been more supicious. The test
was clearly fake.

The old tricky faked From: field. You can check at its header:

Original-Received: from pobox.com (unknown [85.104.219.99])
 by mail.wikimedia.org (Postfix) with ESMTP id 7F30417E5EF

You can see it identifies as pobox.com but it's not pobox.com!
host name :  pobox.com
address   :  207.106.133.28

address   :  85.104.219.99
host name :  dsl85-104-56163.ttnet.net.tr

So it seems from a dialup. The ip belongs to TurkTelekom | Turk Telekom
ADSL-alcatel.
It was probably automatically originated by a virus. It seems like a
W32/lovgate
http://www.sophos.com/virusinfo/analyses/w32lovgatez.html


BTW, Brion. How do you sent that email without getting the mailist
signature?



_______________________________________________
Wikitech-l mailing list
[hidden email]
http://mail.wikipedia.org/mailman/listinfo/wikitech-l
Reply | Threaded
Open this post in threaded view
|

Re: Test

Chad Perrin
On Wed, May 31, 2006 at 04:48:09PM +0200, Platonides wrote:
> When i first read it, the 'Hello' mail i thought it was from the script. Of
> course, if it had retained the attachment it'd been more supicious. The test
> was clearly fake.

This is one of those times that I'm happiest to be using a text-only
MUA, too.

--
Chad Perrin [ CCD CopyWrite | http://ccd.apotheon.org ]
"The measure on a man's real character is what he would do
if he knew he would never be found out." - Thomas McCauley
_______________________________________________
Wikitech-l mailing list
[hidden email]
http://mail.wikipedia.org/mailman/listinfo/wikitech-l