-----BEGIN PGP SIGNED MESSAGE-----

I want to tell you what Alfred Qaeda <[EMAIL PROTECTED]> said
about "CDR: A note to virus authors" on 5 Dec 2001 at 14:31

> >>"The subject line says 'Hi' [...]
> 
> Authors, How can you put so much effort into writing cool virii
> and do such an amateur job on the social engineering?
> 
> Include a hundred different, likely sounding subject lines (encrypted
> of course, but you knew that).   A single constant subject line is
> *so* easy to warn against.  

But a short, simple and commonly used subject line is almost 
impossible to filter automatically without triggering a large volume 
of false positives.  Yes, there are better ways to filter out this 
stuff, but if that was so easy why is this piece of e-performance art 
so widespread?  The social engineering lies in the interminable 
curiosity of the human beast, in spite of Management's best warnings.



-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4 -- QDPGP 2.65 
Comment: Ensure confidentiality, authenticity, non-repudiability

iQCVAwUBPA/mvqLoCveuM+mJAQFB2gP+MdMfl+A+4isr14EnpvmAAnU5PLW7nAeP
0joJ6HcSBrhFUjVebXzcgGQa2NyVrRX6ZIHrkc66upp0Pv76/O07yPvrgPoN5HSj
XPNvRoZlnmyXtsQOKvaSMPW16VcIMeS2DiUbKMsFqxf5efCBNAZhjCyPRV91/uJR
S/FYd+eT3+Y=
=Cp75
-----END PGP SIGNATURE-----

Reply via email to