Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Andrey! On Wednesday, May 02, 2001 at 5:27:53 AM you wrote: Wonderful! :-E. Have you ever heard of the program called Registry Editor (regedit.exe - for Win 9x/ME, regedit.exe/regedt32.exe for the Win NT4/2K)? Most users don't touch it, and for good reasons. I concur with Ben here, it would be a good idea to just put a registry hack (nothing else but a small registry with the lines needed) on their web site. - -- Dierk Haasis PGP keys available: mailto:[EMAIL PROTECTED]?Subject=SendMyPGPkeys The Bat 1.52 Beta/12 Windows 95 4.0 1212 C The graveyards are full of people who rushed in bravely but unwisely. (Terry Pratchett) -BEGIN PGP SIGNATURE- Version: PGP 6.5.8ckt Comment: Privacy is the core element to Freedom! iQA/AwUBOu+hePTo1oA8g8dLEQJtMQCgvaRmNnrti8T2GWMWHESXcFm+/+kAnRJN yshANhvRjA2BMIE6HrnNfjd9 =mQ76 -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hi Wayne, On Tue, 01 May 2001 18:53:57 -0700GMT (02/05/01, 09:53 +0800GMT), Wayne Black wrote: ACM HKCU/Software/rit/The Bat! and go the following entry: ACM ProtectDisableOpen ACM Already listed is HAPPY99.EXE,LOVELETTER*.VBS,*.PIF,*.SCR,*.SHS WB Can you simply enter *.* here to prevent any attachments from opening WB or do you need to enter names or names with wild cards? Should be possible, check it out. BTW there are also two other keys: ProtectAllowOpen and ProtectWarnOpen. If an extension is mentioned in all three (explicitely or via wild card), I don't know which key supersedes which. -- Cheers, Thomas. Moderator der deutschen The Bat! Beginner Liste. Anmeldung unter: [EMAIL PROTECTED] Message reply created with The Bat! 1.51 under Chinese Windows 98 4.10 Build 1998 on a Pentium II/350 MHz. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hi Allie, On Sun, 29 Apr 2001 08:25:38 -0500GMT (29/04/01, 21:25 +0800GMT), A Curtis Martin wrote: MDP 3) This TB hole was plugged in 1.52/beta/10 (IIRC). MDP /moderator GFS So! Are we all supposed to be running Beta versions now? What the GFS H E double Hockey-Stix? ACM No. Marck is just saying that the developers know of the problem and have ACM addressed it. The fix will be present in the upcoming new release version ACM (v1.52). No, Marck was mistaken, as the fix was addressing a real security hole. The much-discussed Strator worm is harmless, as you can run it only if you really really want to (no accidents, ztrader), and will explain this is in seperate mail, as soon as I have finished reading this thread. -- Cheers, Thomas. Moderator der deutschen The Bat! Beginner Liste. Anmeldung unter: [EMAIL PROTECTED] Message reply created with The Bat! 1.51 under Chinese Windows 98 4.10 Build 1998 on a Pentium II/350 MHz. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hi ztrader, On Tue, 1 May 2001 18:38:26 -0700GMT (02/05/01, 09:38 +0800GMT), ztrader wrote: BM Ritlabs should have notified its clients and had a reg edit BM executable on its site for download. Notify the clients of what? I will reply to this despite Marck's Dead Horse (which I deliberately understand as being valid only for that arm of the thread, which had nothing to do with Strator any more, in order for myself to cleverly avoid the trout), as nobody has made the point yet. 1.) Unlike in OL/OE, in TB you can see the actual extension of an attachment. Nobody is even for a second fooled into believing that the file with the double attachment .jpg.pif is a jpg file. 2.) If you see that it has a double extention, and that the real extension is .pif and you click on it anyway, maybe by accident, TB will alert you with a warning dialog: This file has a double extention. The real extension is .pif. Do you want to proceed? If you hit Yes, it's no accident any more. 3.) Since v1.47, the extension .pif has been added to the reg key ProtectDisableOpen by default. Therefore, there is no registry hack or whatever necessary to disable opening attachments with this extension, it is there already. You need to hack the reg in order to be able to open this attachment at all! You need to have sufficient computer knowledge to make this worm become active - and if you have that knowledge, why in Pete's name would you open an unsolicited .pif file? It takes a creative mind and some knowledge about TB's registry settings to even be able to run this attachment at all. Therefore, RitLabs had nothing to report to their clients apart from don't hack the registry, and read the warning messages. Lame attack attempts like this have been anticipated for eons. This worm is a non-issue. -- Cheers, Thomas. Moderator der deutschen The Bat! Beginner Liste. Anmeldung unter: [EMAIL PROTECTED] Message reply created with The Bat! 1.51 under Chinese Windows 98 4.10 Build 1998 on a Pentium II/350 MHz. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hi Ben, On Mon, 30 Apr 2001 19:50:06 -0400GMT (01/05/01, 07:50 +0800GMT), Ben Mills wrote: BM This PR fiasco will haunt them for a long time. Them? You mean Kasparksy? ;-) -- Cheers, Thomas. Moderator der deutschen The Bat! Beginner Liste. Anmeldung unter: [EMAIL PROTECTED] Message reply created with The Bat! 1.51 under Chinese Windows 98 4.10 Build 1998 on a Pentium II/350 MHz. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Silviu, On Tuesday, May 01, 2001 at 08:28:16 +0300, Silviu Cojocaru [SC] wrote concerning 'Warning! First worm that hits TB! too...': SC Lets hope RIT makes that an option, we don't have to hack our SC way in the system like that. I hate the registry. If you put this into a textfile with your favourite text-editor, you don't have to use the program regedit. This is what's in my registry keys from the bat!: Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\RIT\The Bat!] ProtectDisableOpen=HAPPY99.EXE,LOVELETTER*.VBS,*.PIF,*.SCR,*.SHS ProtectAllowOpen=*.JPG,*.JPEG,*.PNG,*.GIF,*.BMP,*.ICO,*.WMF,*.EMF,*.VCF,*.EML,*.MSG ProtectWarnOpen=*.*,*.EXE,*.COM,*.BAT,*.CMD,*.VBS,*.JS,*.PL,*.BAS,*.JAVA,*.REG Replace version 5.00 with 4.00 if you're not on a Win2k machine. Call the text file whateveryoulike.reg execute it and bingo. You can add whatever you like. - -- Best regards, David PGPkeys: mailto:[EMAIL PROTECTED]?subject=Send_PGP_key ** Yo Mama is so hairy, Bigfoot takes pictures of HER! ** [TB! 1.52 Beta/12] [Windows NT 5.0 Build 2195 Service Pack 1] -BEGIN PGP SIGNATURE- Version: 6.5.8ckt Build 05 iQA/AwUBOu/EKlK9yf5+yp9NEQLbsQCaArRONsLwMSwihP0aeRgduiULfmoAoK8L 4/a5iSwhgX17o+gx5uTa+lhg =gqHt -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too ..
Hallo David, Mitteilung vom Mittwoch, 2. Mai 2001, 11:25:01: DvZ Windows Registry Editor Version 5.00 This line should be (on Windows NT 4): REGEDIT4 DvZ [HKEY_CURRENT_USER\Software\RIT\The Bat!] DvZ ProtectDisableOpen=HAPPY99.EXE,LOVELETTER*.VBS,*.PIF,*.SCR,*.SHS DvZ ProtectAllowOpen=*.JPG,*.JPEG,*.PNG,*.GIF,*.BMP,*.ICO,*.WMF,*.EMF,*.VCF,*.EML,*.MSG DvZ ProtectWarnOpen=*.*,*.EXE,*.COM,*.BAT,*.CMD,*.VBS,*.JS,*.PL,*.BAS,*.JAVA,*.REG DvZ Replace version 5.00 with 4.00 if you're not on a Win2k machine. Call DvZ the text file whateveryoulike.reg execute it and bingo. You can add DvZ whatever you like. -- Mit freundlichen Grüßen, Bernhard Kohl -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Dierk, On 02 May 2001 at 08:56:07 +0200 (which was 07:56 where I live) Dierk Haasis wrote to Andrey G. Sergeev (AKA Andris) and made these points: Wonderful! :-E. Have you ever heard of the program called Registry Editor (regedit.exe - for Win 9x/ME, regedit.exe/regedt32.exe for the Win NT4/2K)? DH Most users don't touch it, and for good reasons. I concur with Ben DH here, it would be a good idea to just put a registry hack (nothing DH else but a small registry with the lines needed) on their web site. ... and I don't. Since those fields are published as customizable, any patch to the registry entries would destroy all customization. That is unacceptable. moderator Also unacceptable is the length of this thread which hasn't come up with anything useful IMO. Okay, so a worm has been constructed which can attack the TB Address Book. Also, the registry has to *already have been hacked*, because by default, TB doesn't allow .pif files to be run since v1.47 *and* it has a warning about double extensions on attachments. Unlike all other real worms, to work this worm has to rely on the user to run it. It was also targeted at Russian users, yet we see the most concern and hysteria about it from the English speaking users. Here's the opinion reached elsewhere about this so-called worm: ... And if you hack the reg, then double-click on an unwanted attachment *and* ignore the double-ext warning, you deserve to be hit by a virus. The whole worm doesn't make sense; there is no way anybody can be harmed by this worm accidentally. We came to the conclusion that this piece of code must have been written by Kasparsky themselves, for marketing purposes for their AV software. This thread is going nowhere fast, it's light on fact and heavy on hysteria and clogging up the works IMO. Please take it off list. /moderator - -- Cheers -- .\\arck D. Pearlstone -- Moderator TBUDL / TBBETA / TBTECH [ PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com ] [Any opinions are my own and not those of RIT labs ] TB! v1.52 Beta/12/iKey1000 S/N 14F4B4B2 on Windows NT 5.0 Build 2195 Service Pack 1 -BEGIN PGP SIGNATURE- Version: 6.5.8ckt (build 05) Comment: PGP Sealed for freshness iQA/AwUBOu/hyjnkJKuSnc2gEQIYCwCfRjwCCqnEoiV3X3rI4eKxtHT9KJoAoMw+ uJZiuNboklzpfj38PrFYmBgJ =yh/j -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
DEAD HORSE (was Re: Warning! First worm that hits TB! too...)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Ben, On 02 May 2001 at 23:54:09 -0400 (which was 04:54 where I live) Ben Mills wrote to ztrader and made these points: BM In short: I can't imagine Ritlabs wishes to remain an obscure BM little enterprise hoping to keep its deficiencies mum on a quiet BM little list. You've made your views clear both on and off list. However, this is the TBUDL - The Bat *USER* discussion list. It is about providing help for users. It is moderated to ensure that opinionation and flame wars do not rule the day. It is not run by or for RITlabs. It is run for and by TB users. The fact that you have misunderstood the purpose of this list is clear from your attitude and statements. There is another list, which is mentioned in the message you were sent when you signed up, called TBOT. You can discuss anything you like there. In the meantime, this list remains moderated and about end user support and collaboration. It's not about keeping deficiencies quiet. You need to re-read what the moderatorial intervention *was* at the start of this thread - clearly another issue that got away from you. There is no point to this thread. I declare it a DEAD HORSE. - -- Cheers -- .\\arck D. Pearlstone -- Moderator TBUDL / TBBETA / TBTECH [ PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com ] [Any opinions are my own and not those of RIT labs ] TB! v1.52 Beta/12/iKey1000 S/N 14F4B4B2 on Windows NT 5.0 Build 2195 Service Pack 1 -BEGIN PGP SIGNATURE- Version: 6.5.8ckt (build 05) Comment: PGP Sealed for freshness iQA/AwUBOu/iTTnkJKuSnc2gEQJIWwCePr0A/9PoOSDsS53OM5vMp0Eps+wAn1Qz lI9kHvZnRg2g6mlh4I3ojz/K =u7QS -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too ..
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Bernhard, On Wednesday, May 02, 2001 at 11:47:29 +0200, Bernhard Kohl [BK] wrote concerning 'Warning! First worm that hits TB! too ..': DvZ Windows Registry Editor Version 5.00 BK This line should be (on Windows NT 4): BK REGEDIT4 Yes you're right about that. I think it's the same for win95/98, correct me if I'm wrong. - -- Best regards, David PGPkeys: mailto:[EMAIL PROTECTED]?subject=Send_PGP_key ** Yer momma's so old her social security number is 1! ** [TB! 1.52 Beta/12] [Windows NT 5.0 Build 2195 Service Pack 1] -BEGIN PGP SIGNATURE- Version: 6.5.8ckt Build 05 iQA/AwUBOu/cQ1K9yf5+yp9NEQIfxgCg+XTN6Do3C1nOonYtQVARb/L+xbkAoJcZ prI3RD8W+Pm5XP/+SLJ8UX1s =EV50 -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Wednesday, May 02, 2001, 6:40:06 AM, Andrey G. Sergeev (AKA Andris) wrote: Hello! Tuesday, May 01, 2001, 9:28:16 AM, Silviu Cojocaru [EMAIL PROTECTED] wrote: lost SC Lets hope RIT makes that an option, we don't have to hack our SC way in the system like that. I hate the registry. ...Politics? I'm not into politics, I hate it! _But_ politics has you by default. So if you're on Windows and if you want your system to behave well be ready to use some common system utilities like RegEdit. Well, I'm soo damn good i never had to hack the registry to make Win behave. And this is my last post on this thread -- If Bill Gates had a dime for every time a Windows box crashed... ...Oh wait, he already does. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: DEAD HORSE (was Re: Warning! First worm that hits TB! too...)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday, May 02, 2001 at 12:32 (my local time), Marck D. Pearlstone presented these thoughts about DEAD HORSE (was Re: Warning! First worm that hits TB! too...): MDP There is no point to this thread. I declare it a DEAD HORSE. Thank you Marck! :o) Cheers Peter - -- PGP-Key: http://www.meynsweb.com/public-key.txt -BEGIN PGP SIGNATURE- Version: PGP 6.5i Comment: PGP-signed for better authentication! Key-ID: 0xE10774CE iQA/AwUBOvBOawM2UgbhB3TOEQKCWwCgujFzi7W1RR0rNRa0xOAEuDRzWE4An2LT ukyfnGAqyD1cf9DgM2v2RUrB =7ozu -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 2 May 2001 14:36:30 +0200, jsvrp.gw wrote these words of wisdom: jg Funny, but I have as you can see v1.51 and the .PIF extension is jg already listed, so it seems Ritlabs already solved this problem in the jg last version. So there is no need for any registry changes, unless jg you want to stick in an older version. Yes. It has already been clarified that it was done since version 1.47. ©Allie - -- A. Curtis Martin List Moderator (and fellow registered end-user) TB! v1.52 Beta/12 Win2k (SP1) - 'Professionals built the Titanic, amateurs built the ark.' -BEGIN PGP SIGNATURE- Version: PGP Cyber-Knights Templar 6.5.8ckt (build 05) Comment: KeyID: 0x57C9EB602B0717E2 (Sealed for security). iQA/AwUBOvBlY1fJ62ArBxfiEQK5zACg08J+pLI9EkIZshSpmIwt4mbHBqIAn2wP 5buGTgRlhJPqlbQi16jkMZIr =SFrU -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 30 Apr 2001 21:55:00 -0400, Ben contributed this to our collective wisdom: ACM Actually you can, but it involves registry editing, which in this ACM instance isn't that bad. ACM Point your registry editor to ACM HKCU/Software/rit/The Bat! and go the following entry: BM Where is this information documented? AFAIK, it isn't. This is why these lists are so valuable with the current documentation. ;-)) I know of these registry entries from the time they were added and indicated to us by the developers, on-list. ©Allie - -- A. Curtis Martin List Moderator (and fellow end-user) The Bat! v1.52 Beta/12 | Win2k (SP1) «»«»«» 'PC! Politically Correct (or) Pure Crap!' -BEGIN PGP SIGNATURE- Version: PGP Cyber-Knights Templar 6.5.8ckt (build 05) Comment: KeyID: 0x57C9EB602B0717E2 (Sealed for security). iQA/AwUBOu5afFfJ62ArBxfiEQKJvACfZuS2+CtPDLEg9wwc+0b60S5X8qoAoO60 wAEaY3ix1PlIK6XuZ556Dq0n =qjJI -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hi, Peter, I understand about invalid vs valid. However, I don't see where I can see this distinction between good and bad signature. I now installed 6.5.8ckt and I get for your message a pencil with an x, signer: unknown, keyID=0xE10774CE, Key ID: Invalid Key. Where does it say that this is a good key? Or would it look different for a bad key? -- Best regards, Leomailto:[EMAIL PROTECTED] Using The Bat! v1.52 Beta/12 on Windows NT 5.0 Build 2195 Service Pack 1 -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Leo Zelevinsky ! On Tue, 1 May 2001 10:36:52 -0400 GMT your local time, which was 01.05.2001, 16:36 (GMT+0200) where I live, you wrote: I now installed 6.5.8ckt and I get for your message a pencil with an x, signer: unknown, keyID=0xE10774CE, Key ID: Invalid Key. Where does it say that this is a good key? Or would it look different for a bad key? Unknown means that PGP does not know the key because it is not in your keyring. You have to download the key: Start PGPkeys, click on the Magnifying Glass icon, select key-ID in top down menu and type in 0xE10774CE. PGPkeys will look for the key on the server. After that the PGPLog should show the proper information! - -- Best regards, Gerd == Using The Bat! Version 1.52 Beta/12 PGP/GPG-Keys on request mailto:[EMAIL PROTECTED]?subject=send_key - We are continually faced with a series of great opportunities brilliantly disguised as insoluble problems. John W. Gardner -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.5 (MingW32) - GnuPGshell v1.73 Comment: Digitally signed! So you know it's me!! Key_ID 0xD56C61 iD8DBQE67svTTL+wetVsYYcRAsAnAJ94fzKvrsPmMzAhzZw0Lv9izI7KigCg3/67 zBRtZcf43PT9b2JKt4536Ac= =t9he -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Silviu! On Tuesday, May 01, 2001 at 7:26:30 AM you wrote: You'd say, Look at NT, well I refuse to, it's a huge gorilla, and sucks to much system resources (in comparison to Linux which needs about the same resources that Win 95/98 series needs). Another point against Win2K is their driver scheme. Since it came out i wanted to migrate but couldn't because some of my hardware would not work or work at a much lower level than designed. There are still problems with drivers for my Matrox card and my Guillemot audio card. - -- Dierk Haasis PGP keys available: mailto:[EMAIL PROTECTED]?Subject=SendMyPGPkeys The Bat 1.52 Beta/12 Windows 95 4.0 1212 C To live at all is miracle enough. (Mervyn Peake) -BEGIN PGP SIGNATURE- Version: PGP 6.5.8ckt Comment: Privacy is the core element to Freedom! iQA/AwUBOu7HC/To1oA8g8dLEQKZcgCgrvQ2ildJXhAbd3QjGVuvCnMk5rsAoPHT fgLKlLxwRlRff4d/EYYszda2 =zhYN -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tuesday, May 01, 2001 at 16:36 (my local time), Leo Zelevinsky presented these thoughts about Warning! First worm that hits TB! too...: LZ I now installed 6.5.8ckt and I get for your message LZ a pencil with an x, signer: unknown, keyID=0xE10774CE, Key ID: LZ Invalid Key. Where does it say that this is a good key? Or would it LZ look different for a bad key? Hi Leo, Gerd Ewald showed you one way to get my public key. GE Start PGPkeys, click on the Magnifying Glass icon, select key-ID in GE top down menu and type in 0xE10774CE. PGPkeys will look for the key on GE the server. Another way might be to copy it from the link below. Cheers Peter - -- PGP-Key: http://www.meynsweb.com/public-key.txt -BEGIN PGP SIGNATURE- Version: PGP 6.5i Comment: PGP-signed for better authentication! Key-ID: 0xE10774CE iQA/AwUBOu7XFgM2UgbhB3TOEQIuzwCgp3iBmXeWIef6d8lOHN/8+Nrhr8wAn2FR mLequdD3cz7dz/QNQc5ALTSY =3M63 -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Tuesday, May 01, 2001, 6:24:10 PM, Dierk Haasis wrote: You'd say, Look at NT, well I refuse to, it's a huge gorilla, and sucks to much system resources (in comparison to Linux which needs about the same resources that Win 95/98 series needs). Another point against Win2K is their driver scheme. Since it came out i wanted to migrate but couldn't because some of my hardware would not work or work at a much lower level than designed. There are still problems with drivers for my Matrox card and my Guillemot audio card. On the other hand Xfree86 (the GUI server for Linux) v 4.0.3 take Matrox cards to the limit, they display beautiful images. :) And yes the driver scheme of w2k sux. as w2k sux. -- If Bill Gates had a dime for every time a Windows box crashed... ...Oh wait, he already does. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hello! Wednesday, May 02, 2001, 5:12:59 AM, Ben Mills [EMAIL PROTECTED] wrote: BM But the problem is Ritlabs lack of response to known security issues. BM Hackers will have a heyday with TB if Ritlabs continues to bury its BM head in the sand instead of promptly addressing these issues. What kind of reaction do you expect from the RitLabs? BM One poster mentioned an undocumented registry hack would eliminate the BM potential execution of the worm you brought to the list's attention. BM If this is the case ( and I have no first hand knowledge that it is) BM Ritlabs should have notified its clients BM and had a reg edit executable on its site for download. ^^^ BM It would be a no-brainer for any programmer to crank out in a couple BM of minutes. Wonderful! :-E. Have you ever heard of the program called Registry Editor (regedit.exe - for Win 9x/ME, regedit.exe/regedt32.exe for the Win NT4/2K)? -- Yours sincerely, Andrey G. Sergeev (AKA Andris) http://www.andris.msk.ru/ -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hello! Tuesday, May 01, 2001, 9:28:16 AM, Silviu Cojocaru [EMAIL PROTECTED] wrote: lost SC Lets hope RIT makes that an option, we don't have to hack our SC way in the system like that. I hate the registry. ...Politics? I'm not into politics, I hate it! _But_ politics has you by default. So if you're on Windows and if you want your system to behave well be ready to use some common system utilities like RegEdit. -- Yours sincerely, Andrey G. Sergeev (AKA Andris) http://www.andris.msk.ru/ -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Allie, This is a reply to your message dated Monday, April 30, 2001, 6:09:31 PM, when you wrote: Ai Is it possible to set TB not to execute attachment at all? I Ai mean not to ask even... ACM Actually you can, but it involves registry editing, which in this ACM instance isn't that bad. Point your registry editor to ACM HKCU/Software/rit/The Bat! and go the following entry: ACM ProtectDisableOpen ACM Already listed is HAPPY99.EXE,LOVELETTER*.VBS,*.PIF,*.SCR,*.SHS Can you simply enter *.* here to prevent any attachments from opening or do you need to enter names or names with wild cards? ACM Hmmm, I see .PIF already entered in my list which may have been ACM done by one of these betas, but you can do the same. Add whatever ACM file, or file extension you wish TB! to prevent being executable ACM from within TB!. - -- Wayne [EMAIL PROTECTED] PGP Key ID: 0x0B453F3A49DAB350 Using The Bat! 1.51 Under Windows 98se 4.10 PGP key available: mailto:[EMAIL PROTECTED]?subject=SendPGPKey -BEGIN PGP SIGNATURE- Version: PGP 6.5.8ckt Build 05 iQA/AwUBOu9otQtFPzpJ2rNQEQIwWACghC9ap6vJraipZhCpiuJbN7iEAYMAnRG8 F2FrY3Q2oAC7f+gkQfPdqv6b =vjow -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hi, all, On Saturday, April 28, 2001 you wrote: BC Marck's signature is actually only three lines, but, as a moderator, BC he PGP signs his messages to the list (the same can be said for BC Allie). There have been quite a few impersonators on this list in the BC past. Is it possible that someone would post a set of instructions on how to set up TB to be able to check Marck's signature. Is this possible to do with the internal PGP implementation, or must I download / install another package? Where do I get the key? I have tried and failed to set up TB to check PGP signatures - they always are displayed as invalid. Thanks! -- Best regards, Leomailto:[EMAIL PROTECTED] Using The Bat! v1.52 Beta/12 on Windows NT 5.0 Build 2195 Service Pack 1 -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Leo, On 30 April 2001 at 11:14:33 -0400 (which was 16:14 where I live) Leo Zelevinsky wrote to Brian Clark on TBUDL and made these points: LZ I have tried and failed to set up TB to check PGP signatures - they LZ always are displayed as invalid. :-) This is a common misunderstanding in PGP. Invalid actually means Not validated. It simply states that my key, on your keyring, hasn't been certified by you as been valid. To make it valid, you have to sign it with your key. When checking signatures, the Good or Bad status is what is more important than Valid or Invalid, since the latter only tells you whether or not you have signed the key. In the PGP-Log window which TB displays after signature verification, the left-most icon is a pencil. If there is a red X next to the pencil then the *signature* is invalid meaning that 1) The signature is faked. 2) The message had been changed since it was sent. 3) Both of the above. (2) could be caused inadvertently en-route by, for instance, you ISP planting an advert into the body of the message or TAB characters being expanded to spaces on receipt. Anyway, this is all a bit OT for TBUDL and there is a very good PGP beginners list on yahoogroups called PGP-Basics. I can recommend it very highly. - -- Cheers -- .\\arck D. Pearlstone -- Moderator TBUDL / TBBETA / TBTECH [ PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com ] [Any opinions are my own and not those of RIT labs ] TB! v1.52 Beta/12/iKey1000 S/N 14F4B4B2 on Windows NT 5.0 Build 2195 Service Pack 1 -BEGIN PGP SIGNATURE- Version: 6.5.8ckt (build 05) Comment: PGP Sealed for freshness iQA/AwUBOu2JeTnkJKuSnc2gEQKqogCfYFaL29kNYl6ocvWuifPfIFBuKFUAoMKt BKIdchMXZXtylcUG6b10VAol =sIgZ -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Leo! On Monday, April 30, 2001 at 5:14:33 PM you wrote: Is this possible to do with the internal PGP implementation, If he uses DH/DSS I don't think so. or must I download / install another package? If you are really interested in PGP verification/signing/encrypting, definitely Yes! Where do I get the key? Either ask Marck for them or look them up on a public key server (if he uploaded them). I have tried and failed to set up TB to check PGP signatures - they always are displayed as invalid. As you yourself implicitly stated, you need his key and they must be signed by you. And you have to set up the trust level to full. (Let's skip the details, when you d'l PGP, get your hands also on the documentation*.) - -Beware- You should only sign his key if you are certain it belongs to him!! - -Beware- *http://www.ipgpp.com/; look for 6.5.8 build 05 and documentation for 6.5.1 (both under Quick downloads). - -- Dierk Haasis PGP keys available: mailto:[EMAIL PROTECTED]?Subject=SendMyPGPkeys The Bat 1.52 Beta/12 Windows 95 4.0 1212 C Assumptions are the mother of all screw ups. -BEGIN PGP SIGNATURE- Version: PGP 6.5.8ckt Comment: Privacy is the core element to Freedom! iQA/AwUBOu19CPTo1oA8g8dLEQLAtwCfR9Dj/P3z/RFB1uvnrXTmFyAjb4EAoMvq EC2D8ErFGSh/7w9T4NPohFuP =3vZj -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hello Marck, On Monday, April 30, 2001 at 5:49:12 PM you wrote: MDP In the PGP-Log window which TB displays after signature verification, MDP the left-most icon is a pencil. If there is a red X next to the MDP pencil then the *signature* is invalid meaning that MDP 1) The signature is faked. MDP 2) The message had been changed since it was sent. MDP 3) Both of the above. IMHO not at all ... it could also mean your pub-key is not installed in the local keyring ... made a Check OpenPGP Signature without having your key in my keyring ... red X near the pencil! Searched a KeyServer for your Key, imported it, signed it, increased trustlevel, checked sig again (without closing TB!) - et voila! everything is fine :-) .. so there eesm to be no possibility to check the validity of a pgp-signature without having the pub-key of the author installed :-( -- Regards Peter Palmreuthermailto:[EMAIL PROTECTED] Using The Bat! v1.52 Beta/12 on Windows 98 4.90 Build 3000 (WindowsME) -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hi Dierk, On Mon, 30 Apr 2001, at 17:56:07 +0200 you wrote: DH As you yourself implicitly stated, you need his key and they DH must be signed by you. And you have to set up the trust level DH to full. That's not completely true. You only need to adjust the trust settings of Marck's keys (or of anyone else) if you want to automatically trust keys which were signed by Marck. -- Regards, Lars The Bat! 1.52 Beta/12 on Windows NT 5.0 Build 2195 Service Pack 1 |Lars Geiger | mailto:[EMAIL PROTECTED]| | PGP Key: mailto:[EMAIL PROTECTED]?Subject=GetPublicKey | -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Lars! On Monday, April 30, 2001 at 6:40:40 PM you wrote: That's not completely true. You only need to adjust the trust settings of Marck's keys (or of anyone else) if you want to automatically trust keys which were signed by Marck. You are right; got it mixed up since I only sign keys I trust - so I set the trust level at the same time. Last operation is vital in a web of trust. - -- Dierk Haasis PGP keys available: mailto:[EMAIL PROTECTED]?Subject=SendMyPGPkeys The Bat 1.52 Beta/12 Windows 95 4.0 1212 C The First Amendment presupposes that right conclusions are more likely to be gathered out of a multitude of tongues, than through any kind of authoritative selection. (Judge Learned Hand as cited in New York Times v. Sullivan) -BEGIN PGP SIGNATURE- Version: PGP 6.5.8ckt Comment: Privacy is the core element to Freedom! iQA/AwUBOu2OzvTo1oA8g8dLEQKhtwCg3xrtzHESCsIy6WCNj+cGQb2QCPcAnRqM EGO9JzRSsbcyigA7KouJ43FP =NU+V -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday, April 30, 2001 at 17:14 (my local time), Leo Zelevinsky wrote about Warning! First worm that hits TB! too...: LZ I have tried and failed to set up TB to check PGP signatures - they LZ always are displayed as invalid. Hi Leo, you seem to have tried and set up The PGP sig check quite well. The use of the term invalid is easily misleading newcomers, as it only means that you haven't signed that particular key yourself. Of course you won't do this before you feel certain that this key really belongs to that person. For validating the signature it's much more important to look at the signature status. If it's good you can be sure that the mail you're reading is exactly the one that was sent. A bad signature means that something has been changed on its way. So, don't worry too much about the invalid... (Btw. if you check my signature on this mail, I'd hope it will turn out good, but most probably it will be invalid, as you can't know if I am the person that I pretend to be... ;o) ) Cheers Peter - -- PGP-Key: http://www.meynsweb.com/public-key.txt -BEGIN PGP SIGNATURE- Version: PGP 6.5i Comment: PGP-signed for better authentication! Key-ID: 0xE10774CE iQA/AwUBOu3brgM2UgbhB3TOEQJHBACdF5YMb5t0wGQgaPyQ0B33HANNrqQAnRSl 2oLz9/BlVNR+5AVBbUgr3uxr =zNnr -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Tuesday, May 01, 2001, 4:09:31 AM, A Curtis Martin wrote: On Mon, 30 Apr 2001 19:50:06 -0400, Ben graced us with these comments: Ai Is it possible to set TB not to execute attachment at all? I mean not Ai to ask even... BM I don't believe so. «..rest snipped..» Actually you can, but it involves registry editing, which in this instance isn't that bad. Point your registry editor to HKCU/Software/rit/The Bat! and go the following entry: ProtectDisableOpen Already listed is HAPPY99.EXE,LOVELETTER*.VBS,*.PIF,*.SCR,*.SHS Hmmm, I see .PIF already entered in my list which may have been done by one of these betas, but you can do the same. Add whatever file, or file extension you wish TB! to prevent being executable from within TB!. Lets hope RIT makes that an option, we don't have to hack our way in the system like that. I hate the registry. -- If Bill Gates had a dime for every time a Windows box crashed... ...Oh wait, he already does. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Tuesday, May 01, 2001, 2:50:06 AM, Ben Mills wrote: What concerns me more is Ritlabs apparent disregard for its customers regarding this latest security issue. If it (Ritlabs) has any ambition to becoming a major player in the mail client business; the way they've handled this exploit has set them back way back. Ritlabs must earn business accounts with site licenses, and they've proven to me that they don't understand the level of service a corporation demands and requires. Microsoft doesn't either. Their software has too many features that represent security threats.I think that (and quite sure this is the case), 70% of the security on Win machines is M$'s job. They could do a lot to prevent the infections since it's their OS. Until now, they don't. You'd say, Look at NT, well I refuse to, it's a huge gorilla, and sucks to much system resources (in comparison to Linux which needs about the same resources that Win 95/98 series needs). This PR fiasco will haunt them for a long time. My company has over 100 computers with 30-35 running email clients (Eudora 303), I was ready to purchase a TB site license until you, I believe, posted the info regarding the security issue. Apparently it was kept pretty mum on this list and the sparks sure flew when you mentioned it. As it stands, I wouldn't purchase or recommend TB for all the tea in China. Ritlabs has a great deal of maturing to do before it's ready to compete with the incumbents such as Microsoft, Eudora etc. I do not think they want to compete with M$ (Outlook just sux), they with Eudora (Qualcomm) which is free. That hard, Eudora has lots of options and it _is_ secure. Their PR sucks also. I mean one requests info, and never get it. That's not really nice, is it ? -- If Bill Gates had a dime for every time a Windows box crashed... ...Oh wait, he already does. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Ben! On Sunday, April 29, 2001 at 5:13:36 AM you wrote: /snipped entire cigar/ Get off your high horse! Many of us don't make a profession of reading all the posts that come through these lists, and I happen to be one of them! Maybe not all, but *the moderators*. It is there job to give out such comments. And on this list they are very friendly. I don't know if the moderators - since you specifically targeted them - - will answer to you. If you have read the rules of this list you would at least have refrained from your tone, which is way out of line. - -- Dierk Haasis PGP keys available: mailto:[EMAIL PROTECTED]?Subject=SendMyPGPkeys The Bat 1.52 Beta/12 Windows 95 4.0 1212 C Wenn ich mir eine Art Mensch ausdenke, die allen meinen Instinkten zuwiderläuft, so wird immer ein Deutscher daraus. (Friedrich Nietzsche) -BEGIN PGP SIGNATURE- Version: PGP 6.5.8ckt Comment: Privacy is the core element to Freedom! iQA/AwUBOuvI2vTo1oA8g8dLEQIurwCgzMsmp8TLS7oykzx4sLDyZbt0g3EAoLii O3hblVnvi8XrDykYZOZ6B1qA =fzuw -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hello all, on Sun, 29 Apr 2001, at 03:22:11 local time (GMT +0100), Marck wrote: 3) This TB hole was plugged in 1.52/beta/10 (IIRC). any news when those of us not into betas are going to be safe from this worm ?? -- Rob using The Bat! 1.51 ... Go the extra mile. It makes your boss look like a slacker. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Rob! On Sunday, April 29, 2001 at 12:22:20 PM you wrote: any news when those of us not into betas are going to be safe from this worm ?? You are ... if you just adhere to e-mail basics. TB! does not execute any attachment automatically. So just don't double-click/execute/open dubious attachments. And - since this weekend ranting seems to be on vogue on-list - anybody opening such a stupid attachment does not deserve better. Same as with the Kournikova worm (ever thought of buying a *Playboy* or *Hustler*?). - -- Dierk Haasis PGP keys available: mailto:[EMAIL PROTECTED]?Subject=SendMyPGPkeys The Bat 1.52 Beta/12 Windows 95 4.0 1212 C Love is the answer ... (John Lennon) -BEGIN PGP SIGNATURE- Version: PGP 6.5.8ckt Comment: Privacy is the core element to Freedom! iQA/AwUBOuvpL/To1oA8g8dLEQJVigCg4m82MEm8WtqfDLi092b1JFvsfZ4An1U0 WeeQbXkntFjUp2jwXOE6n6fl =b9UZ -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sunday, April 29, 2001, 7:13:02 AM, Dierk Haasis wrote: DH You are ... if you just adhere to e-mail basics. TB! does not execute DH any attachment automatically. DH So just don't double-click/execute/open dubious attachments. DH And - since this weekend ranting seems to be on vogue on-list - DH anybody opening such a stupid attachment does not deserve better. Same DH as with the Kournikova worm (ever thought of buying a *Playboy* or DH *Hustler*?). I'm sure that we are all extremely impressed by this witty and knowledgeable response. Your expertise is duly noted here. I personally didn't view Rob's post as a *rant*, but rather as a simple question, to which I would expect a simple and respectful answer. ( I obviously don't have the copious grey matter that you have at your disposal). What I see *on vogue on-list* this weekend are replies better handled by someone with a little less attitude. Aptitude speaks for itself. Truly in awe, Ron. - -- PGP-Key ID: 0x60FBA485 -BEGIN PGP SIGNATURE- Version: 6.5.8ckt http://www.ipgpp.com/ Comment: Encryption is my right.PGP-6.5.8ckt is my choice ! iQA/AwUBOuwPbJHUc2Bg+6SFEQKHUACff7kOY6fzTSUZcBp4FKDfi1dpKrMAnimo Wd2Ylj/ZLI+3ZEDzkhY9S6Py =UGcE -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, 29 Apr 2001 06:17:15 -0700, George contributed this to our collective wisdom: MDP 1) This was all you needed to post to the list. MDP 2) It was posted last week - did you check the archive? MDP 3) This TB hole was plugged in 1.52/beta/10 (IIRC). MDP /moderator GFS So! Are we all supposed to be running Beta versions now? What the GFS H E double Hockey-Stix? No. Marck is just saying that the developers know of the problem and have addressed it. The fix will be present in the upcoming new release version (v1.52). ©Allie - -- A. Curtis Martin List Moderator (and fellow end-user) The Bat! v1.52 Beta/12 | Win2k (SP1) «»«»«» 'Oxymoron: Work Party.' -BEGIN PGP SIGNATURE- Version: PGP Cyber-Knights Templar 6.5.8ckt (build 05) Comment: KeyID: 0x57C9EB602B0717E2 (Sealed for security). iQA/AwUBOuwWUlfJ62ArBxfiEQIjzACgrTDwLeJTsXy4/Fg0wIs3VDTW3BwAoObN OW6zVHUzcEdNJixEmMU7phO2 =g7nG -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
on Sun, 29 Apr 2001, at 13:13:02 local time (GMT +0200), Dierk wrote: And - since this weekend ranting seems to be on vogue on-list - ?!?!? hope you have a nice weekend too :-\ -- Rob using The Bat! 1.51 ... After all is said and done, more is said than done. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Ronald! On Sunday, April 29, 2001 at 2:57:19 PM you wrote: I'm sure that we are all extremely impressed by this witty and knowledgeable response. Your expertise is duly noted here. I personally didn't view Rob's post as a *rant*, but rather as a simple question, to which I would expect a simple and respectful answer. ( I obviously don't have the copious grey matter that you have at your disposal). What I see *on vogue on-list* this weekend are replies better handled by someone with a little less attitude. Aptitude speaks for itself. 1. I did include the correct answer to the problem (third line of my response). 2. If I remember correctly Rob did not just ask for a solution but shot against a perfectly correct answer from Marck insultingly. 3. I don't know if I have any grey matter at my disposal ... 4. I am not here to impress anyone, for that I go to my fitness studio. - -- Dierk Haasis PGP keys available: mailto:[EMAIL PROTECTED]?Subject=SendMyPGPkeys The Bat 1.52 Beta/12 Windows 95 4.0 1212 C There are three kinds of lies: Lies, damned lies, and statistics. (Benjamin Disraeli/Mark Twain) -BEGIN PGP SIGNATURE- Version: PGP 6.5.8ckt Comment: Privacy is the core element to Freedom! iQA/AwUBOuwcBfTo1oA8g8dLEQIWMgCbBAZOdE6/xMRKIzdQ/bA2bcM2clcAn0to gDxJeHdRiD5QWY/vIwg1iZuV =YwJN -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hello Ben, On Sunday, April 29, 2001 at 5:13:36 AM you wrote: BM Also, the link is broken so I'm grateful to the BM poster for forwarding the entire article TB! included a closing bracket to much into the link ... so double click the link and remove the last bracket in the address bar or use this link (which is identically to the first, but without any special character at it's side) http://www.viruslist.com/eng/viruslist.asp?id=4188key=100013100072 -- Regards Peter Palmreuthermailto:[EMAIL PROTECTED] Using The Bat! v1.51 on Windows 98 4.90 Build 3000 (WindowsME) -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
on Sun, 29 Apr 2001, at 16:49:34 local time (GMT +0200), Dierk wrote: 2. If I remember correctly Rob did not just ask for a solution but shot against a perfectly correct answer from Marck insultingly. oh ? in that case i would like to know what is so 'insulting' about this ... R any news when those of us not into betas are going to be safe from this R worm ?? ... so i can be more polite next time. believe me ; when i want to be insulting, everybody would notice, not just you ... also, i would probably not do it here. -- Rob using The Bat! 1.51 ... A conclusion is simply the place where you got tired of thinking. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
DEAD HORSE (was Re: Warning! First worm that hits TB! too...)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Dierk, On 29 April 2001 at 16:49:34 +0200 (which was 15:49 where I live) Dierk Haasis wrote to Ronald Clark and made these points: DH 2. If I remember correctly Rob did not just ask for a solution but DH shot against a perfectly correct answer from Marck insultingly. To be fair it was Ben who was rude, not Rob, so that was a bit of an unfair misdirection and Dierk may owe Rob a private apology g. In the mean time, I would say that this thread has run its course. moderator DEAD HORSE - move along please :-). /moderator - -- Cheers -- .\\arck D. Pearlstone -- Moderator TBUDL / TBBETA / TBTECH [ PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com ] [Any opinions are my own and not those of RIT labs ] SB! v1.52 Beta/12/iKey1000 S/N 14F4B4B2 on Windows NT 5.0 Build 2195 Service Pack 1 -BEGIN PGP SIGNATURE- Version: 6.5.8ckt (build 05) Comment: PGP Sealed for freshness iQA/AwUBOuwvGjnkJKuSnc2gEQJviQCdHQzPkZIY1so0d4OzRYnSB7ML+GAAn0FW bABlqspzlIDz9y/MRcBybbCe =dxVa -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Sunday, April 29, 2001, 1:22:20 PM, Rob wrote: Hello all, on Sun, 29 Apr 2001, at 03:22:11 local time (GMT +0100), Marck wrote: 3) This TB hole was plugged in 1.52/beta/10 (IIRC). any news when those of us not into betas are going to be safe from this worm ?? It seems you, and all the others _are_ safe from the worm as long as we do not open the attachment. Common sense _should_ tell us that we _should not_ open strange mail attachments, or unsolicited mail attachments. Those must be investigated, and generally they get trashed. By investigating I mean, look at the extension, if they include two, or more extensions then they are surely malware and should be trashed right away. -- If Bill Gates had a dime for every time a Windows box crashed... ...Oh wait, he already does. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Sunday, April 29, 2001, 4:25:38 PM, A Curtis Martin wrote: MDP 1) This was all you needed to post to the list. MDP 2) It was posted last week - did you check the archive? MDP 3) This TB hole was plugged in 1.52/beta/10 (IIRC). MDP /moderator GFS So! Are we all supposed to be running Beta versions now? What the GFS H E double Hockey-Stix? No. Marck is just saying that the developers know of the problem and have addressed it. The fix will be present in the upcoming new release version (v1.52). That still isn't very much OK. They should be able to release patches on such security threats, and not hurry the release of the next version, _if_they rush it. I don't think they do, and they shouldn't, because we want a prime quality mailer. That's why patches are so useful. They buy you time. -- If Bill Gates had a dime for every time a Windows box crashed... ...Oh wait, he already does. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hello all, on Sun, 29 Apr 2001, at 18:04:58 local time (GMT +0300), Silviu wrote: It seems you, and all the others _are_ safe from the worm as long as we do not open the attachment. of course. but accidents do happen ... 1 click too much or too fast and it's over :-( so if there really is a worm/virus out there that specifically targets TB, i would like to have TB patched ASAP !! not just a beta that might give me other problems, as betas do ... ;-) -- Rob using The Bat! 1.51 ... According to my calculations the problem doesn't exist. -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
On Sunday, April 29, 2001, Silviu Cojocaru wrote: That still isn't very much OK. They should be able to release patches on such security threats, and not hurry the release of the next version, _if_they rush it. I don't think they do, and they shouldn't, because we want a prime quality mailer. That's why patches are so useful. They buy you time. These little version steps are pretty much patches - minor fixed and enhancements. The next real, new version of TB will 2.0 and, trust me, they aren't rushing it. -- Paula Ford The Bat! 1.46c (reg) Windows 95 4.0 Build 950 -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi ANT-ilic, On 28 April 2001 at 20:53:17 +0200 (which was 19:53 where I live) ANT-ilic wrote to [EMAIL PROTECTED] and made these points: Ai Beware of the Internet-worm Stator moderator snip Ai For more technical details, visit the Kaspersky Virus Encyclopedia Ai (http://www.viruslist.com/eng/viruslist.asp?id=4188key=100013100072). Ai /Worm info 1) This was all you needed to post to the list. 2) It was posted last week - did you check the archive? 3) This TB hole was plugged in 1.52/beta/10 (IIRC). /moderator - -- Cheers -- .\\arck D. Pearlstone -- Moderator TBUDL / TBBETA / TBTECH [ PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com ] [Any opinions are my own and not those of RIT labs ] SB! v1.52 Beta/12/iKey1000 S/N 14F4B4B2 on Windows NT 5.0 Build 2195 Service Pack 1 -BEGIN PGP SIGNATURE- Version: 6.5.8ckt (build 05) Comment: PGP Sealed for freshness iQA/AwUBOut61DnkJKuSnc2gEQK0igCdHeJK8g8VcM0AQVhwq7kJdftiQEQAoPRq M0mErhiyfj+jzL9AVp8QB85z =3vcH -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Subject: Warning! First worm that hits TB! too... From: Ben Mills Dated: Sat, 28 Apr 2001, 23:13:36 (10:13:36 PM Local) ~~ Hi Ben, BM Also, the link is broken Worked fine for me. -- - ND -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: Warning! First worm that hits TB! too...
Hi Ben, @ 11:13:36 PM on 4/28/01, Ben Mills wrote: ... BM Get off your high horse! Many of us don't make a profession of BM reading all the posts that come through these lists, and I happen BM to be one of them! Archives : http://tbudl.thebat.dutaint.com ^^ That's in the footer of every message to the list. Although, I do understand that there is a lot of information that is rather hard to dig up from archives. ... BM Oh! If you really wish to save bandwidth...I suggest you dump that BM bloated signature. I couldn't care less what patched-up OS you're BM using. Marck's signature is actually only three lines, but, as a moderator, he PGP signs his messages to the list (the same can be said for Allie). There have been quite a few impersonators on this list in the past. Like it or not, what they say, in moderator mode, is the law of the land. -- Brian Clark [EMAIL PROTECTED] Web Architect, Designer, and Programmer PGP is spoken here: 0xE4D0C7C8 [SB! 1.52 Beta/12/iKey1000, Windows 98 (SE) 4.10 Build A] -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
