On Thursday 12 June 2003 3:37 pm, Carles Xavier Munyoz Bald� wrote: > (2) If I automate the virus database update process to add news virus by > email, I'm opening a hole to my system. Everyone that knows my email addres > in the virusdb list and the virus list messages format may send me false > virus signatures that will be automatically added to my virus database. > I believe that this hole may be solved adding a m5checksum or PGP digital > signature to all the messages sent to this list.
MD5 checksum would be useless for this - anybody can calculate it and add it to a false virus report. Digital signature is the only way to confirm an authentic sender. Regards, Antony. -- Anything that improbable is effectively impossible. - Murray Gell-Mann, Nobel Prizewinner in Physics --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
