Re: My apologies

2023-08-03 Thread Grant Taylor via users
Having myself been through what Thomas is appologizing for, I have some 
comments on what Reindl H. is doing.


On 8/3/23 3:06 PM, Ken D'Ambrosio wrote:

I ... think he should be blocked.


He /is/ blocked from from sending messages to / through the mailing list.

I've been online for over 40 years, and it's rare to have someone so 
actively hostile right out of the gate


Here's the thing.  He is sending his reply /around/ the list -- 
apparently -- so that it looks like his messages came from the list.


So his behavior is -- in my opinion -- both hostile and deceptive.

I admit, it made me worried what kind of environment was fostered 
on the Spamassassin list when I asked my newbie question, and was 
outright mocked by him.


I think that reaction is perfectly understandable.

I'm sorry that someone made you feel that way about the SpamAssassin 
users mailing list / community.


I hope that you realize that he is in the minority and doesn't speak for 
the vast majority of us.


And so, while I have zero sway as a team member or anything like that, 
as a newbie mailing list member, looking for help, I humbly submit 
that he's not someone you want being the first interaction a new list 
member has.


Agreed.


$.02, YMMV, etc.


:-)



Grant. . . .


Re: My apologies

2023-08-03 Thread John Hardin

On Thu, 3 Aug 2023, Ken D'Ambrosio wrote:


On 2023-08-02 15:49, Loren Wilton wrote:

 I've blocked him on my mail server, as well.


 I don't
 know that I'd block him, but you do need to take anything he says
 witha few horselicks of salt.


I (who have almost nothing to contribute to Spamassassin itself, other than 
being a user) think he should be blocked.


He was voted off the list a few years ago. That does not prevent him from 
reading and replying to list posts.


I've been online for over 40 
years, and it's rare to have someone so actively hostile right out of the 
gate --


Agreed.

I admit, it made me worried what kind of environment was fostered on 
the Spamassassin list when I asked my newbie question, and was outright 
mocked by him.


That sort of behavior is why he was banned.

And so, while I have zero sway as a team member or anything 
like that, as a newbie mailing list member, looking for help, I humbly submit 
that he's not someone you want being the first interaction a new list member 
has.


Sadly, we cannot control that.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.org pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  How do you argue with people to whom math is an opinion? -- Unknown
---
 Tomorrow: the 288th anniversary of John Peter Zenger's acquittal


Re: My apologies

2023-08-03 Thread Ken D'Ambrosio

On 2023-08-02 15:49, Loren Wilton wrote:

I've blocked him on my mail server, as well.


I don't
know that I'd block him, but you do need to take anything he says
witha few horselicks of salt.


I (who have almost nothing to contribute to Spamassassin itself, other 
than being a user) think he should be blocked.  I've been online for 
over 40 years, and it's rare to have someone so actively hostile right 
out of the gate -- I admit, it made me worried what kind of environment 
was fostered on the Spamassassin list when I asked my newbie question, 
and was outright mocked by him.  And so, while I have zero sway as a 
team member or anything like that, as a newbie mailing list member, 
looking for help, I humbly submit that he's not someone you want being 
the first interaction a new list member has.


$.02, YMMV, etc.

-Ken


Re: SA and UTF-8 Filename Attachments

2023-08-03 Thread Bill Cole

On 2023-08-03 at 12:21:11 UTC-0400 (Thu, 3 Aug 2023 12:21:11 -0400)
Jared Hall 
is rumored to have said:


SA v3.4.6:

Consider an Email with a UTF-8 attachment name: ®Payroll_stubs.Htm 
defined by the MIME header:


Content-Disposition: attachment; 
filename*0*=utf-8''%C2%AEPayroll_stubs.Htm



A PERL unicode-formatted rule fails:

mimeheader __JR_EXPLOIT_ATT_UTF        Content-Disposition =~ 
/(\xC2\xAEPayroll_stubs\.Htm)([";']?|$)/



The more native (raw) formatted rule works even without specifying 
"Content-Disposition:raw":


mimeheader __JR_EXPLOIT_ATT_UTF        Content-Disposition =~ 
/(%C2%AEPayroll_stubs\.Htm)([";']?|$)/



How does SA handle UTF-8 filenames?


That is dependent on the value of normalize_charset (and possibly also 
on your Perl version but that would be due to bugs in Perl.)


It may also vary by platform, as substantial improvement in Unicode 
handling was made between 3.4.x and 4.x and some distros that 
cherry-pick improvements may have backported fixes into what they call 
'3.4.6'.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


SA and UTF-8 Filename Attachments

2023-08-03 Thread Jared Hall

SA v3.4.6:

Consider an Email with a UTF-8 attachment name: ®Payroll_stubs.Htm 
defined by the MIME header:


Content-Disposition: attachment; filename*0*=utf-8''%C2%AEPayroll_stubs.Htm


A PERL unicode-formatted rule fails:

mimeheader __JR_EXPLOIT_ATT_UTF        Content-Disposition =~ 
/(\xC2\xAEPayroll_stubs\.Htm)([";']?|$)/


The more native (raw) formatted rule works even without specifying 
"Content-Disposition:raw":


mimeheader __JR_EXPLOIT_ATT_UTF        Content-Disposition =~ 
/(%C2%AEPayroll_stubs\.Htm)([";']?|$)/


How does SA handle UTF-8 filenames?


-- Jared Hall