Julian Mehnle wrote:

"technical" := "affecting the technical systems involved in storing and transporting the data items subject to being scanned by ClamAV".

"technical threat" := (go figure...)

Would that include viruses that require action on the part of the recipient? Included in password protected zips? What is the difference between tricking a person into opening a password protected zip (which is not dangerous in its delivered form) and tricking a user into clicking a link that takes them to the virus?


How little user interaction is required before it is considered a "technical" enough? Require the user to open the attachment? Require the user to pop their mail?

Technically, most viruses these days are social engineered in some way. Unlike the the boot sector viruses that seem to have gone the way of the floppy disc.

Given the new push for integration between the internet and local computers, limiting an AV scanner to only protecting against viruses physically included in an email is a bit short-sighted in my opinion. It's getting to the point where users are unable to distinguish between what is remote and local content.

--
Dennis Skinner
Systems Administrator
BlueFrog Internet
http://www.bluefrog.com

"She calls it "stick season," this slow disrobing of summer, leaf by leaf, till the bores of tall trees rattle and scrape in the wind. - Eric Pinder"
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to