On Tue, 11 Sep 2001, Raju Mathur spewed into the ether:
> Hi Mukund,
>
> >>>>> "mukund" == mukund <[EMAIL PROTECTED]> writes:
>
> mukund> To me it looks like an hoax and an attempt to install
> mukund> Trojan. The author has not given how the virus will
> mukund> spread?
>
> Are you saying this after examining the code, or just intuition? I
> haven't heard anything about this program being a trojan so far, and
> if it were I'd definitely have got some news from BUGTRAQ or other
> sources by now.
Mukund is erring on the side of caution. Bugtraq has a couple of
reviews of this today, and both don't make me feel very safe about this.
> mukund> As simple file size check would detect the virus, why run
> mukund> binaries from the author?
>
> mukund> The author signs as
> >> Regards, - anonymous
>
> mukund> Should we believe him?
>
> Why not? It's possible s/he's protecting her identity to avoid future
> prosecution under the infamous DMCA. Maybe s/he's Dmitry's
> sister/brother? :-)
True, but again, it could just be a simple method of social
engineering to get the virus to spread.
> mukund> I think this is an hoax, and do not run any binary to
> mukund> detect the so called virus.
>
> Again, some rationale for this would be useful. If you have
> reasonable proof or doubt, let's let the world know.
man tripwire is better,
> mukund> Raju, I wish you should have checked the authenticity
> mukund> before posting such stuff, which might create unnecessary
> mukund> panic among the lister.
>
> I did what I had to: released the advisory, and warned about the
> authenticity. I work on the principle that other people are smart
> enough not to do something which they're unsure of if they've been
> explicitely warned in large type.
This is perfectly correct on Raju's part. The posting was authentic, a
warning was issued and forwarded. How much weight to give the warning
is a matter of judgement on the readers part.
Devdas Bhagat
--
To communicate is the beginning of understanding.
-- AT&T
_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help
