Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-24 Thread Jean Laeremans
On Mon, Sep 23, 2013 at 4:13 PM, Paul Hill paulroberth...@gmail.com wrote: On 23 September 2013 14:43, Jean Laeremans laeremans.jeanma...@gmail.com wrote: Did far more or at least could do far more than eavesdropping. The IT people i heard were - to put it mildly - not amused. The IT

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-24 Thread Gérard Lochon
- Original Message - From: Jean Laeremans laeremans.jeanma...@gmail.com To: ProFox Email List profox@leafe.com Sent: Tuesday, September 24, 2013 3:31 PM Subject: Re: [NF] How Can Passworded Zip Files be Dangerous? On Mon, Sep 23, 2013 at 4:13 PM, Paul Hill paulroberth...@gmail.com

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-23 Thread Jean Laeremans
On Mon, Sep 23, 2013 at 4:00 AM, Ken Dibble krdib...@stny.rr.com wrote: This could have easily have turned out in a digital 9/11 a few times over. http://gigaom.com/2013/09/16/**belgian-telco-says-it-was-**

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-23 Thread Gérard Lochon
It was far worse than that. BICS - a major European provider - was targeted. The whole infrastructure was in danger ! Estimated costs of the removal of the malware : 5.000.000 E.. Wow ! That that whole infrastructure was a malware ... ;o)

RE: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-23 Thread Allen
Whatever it was it does not excuse other governments spying on it. USA or UK whoever did it. Al -Original Message- Wow ! That that whole infrastructure was a malware ... ;o) ___ Post Messages to: ProFox@leafe.com Subscription Maintenance:

RE: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-23 Thread Ken Dibble
Whatever it was it does not excuse other governments spying on it. USA or UK whoever did it. Yes. As I said, I am completely opposed to that kind of thing. My reading of the linked story didn't tell me that something got damaged though. Ken Dibble www.stic-cil.org

RE: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-23 Thread Allen
Nor me, I didn't know it was. From what I understood is the cable was possibly intercepted as it crossed uk soil/water and I would have guessed it was electronic rather than breaking into the cable. I think too much invasion of privacy is done in the name of anti terrorism. I believe it's used as

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-23 Thread Jean Laeremans
On Mon, Sep 23, 2013 at 3:31 PM, Allen pro...@gatwicksoftware.com wrote: Nor me, I didn't know it was. From what I understood is the cable was possibly intercepted as it crossed uk soil/water and I would have guessed it was electronic rather than breaking into the cable. I think too much

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-23 Thread Paul Hill
On 23 September 2013 14:43, Jean Laeremans laeremans.jeanma...@gmail.com wrote: Did far more or at least could do far more than eavesdropping. The IT people i heard were - to put it mildly - not amused. The IT people were not doing their jobs in the first place by letting malware into the

RE: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-23 Thread Allen
I'm not surprised they were not amused. This is way out of order. Bet no one owns up Al -Original Message- Nah Al it was malware. Rather sophisticated stuff . Discovered mid august but it took until a few days ago to remove it as it had to be done in one sweep. Did far more or at least

RE: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-23 Thread Allen
...@leafe.com] On Behalf Of Paul Hill Sent: 23 September 2013 16:14 To: profoxt...@leafe.com Subject: Re: [NF] How Can Passworded Zip Files be Dangerous? On 23 September 2013 14:43, Jean Laeremans laeremans.jeanma...@gmail.com wrote: Did far more or at least could do far more than eavesdropping

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-23 Thread Jean Laeremans
Rather cheap remark Paul --- StripMime Report -- processed MIME parts --- multipart/alternative text/plain (text body -- kept) text/html --- ___ Post Messages to: ProFox@leafe.com Subscription Maintenance:

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-22 Thread Jean Laeremans
-Original Message- From: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Ken Dibble Sent: 21 September 2013 20:53 To: profoxt...@leafe.com Subject: RE: [NF] How Can Passworded Zip Files be Dangerous? Don't believe it. Google is listening all the time. Put the hosts file

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-22 Thread Michael Madigan
-Original Message- From: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Ken Dibble Sent: 21 September 2013 20:53 To: profoxt...@leafe.com Subject: RE: [NF] How Can Passworded Zip Files be Dangerous? Don't believe it. Google is listening all the time. Put the hosts file

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-22 Thread Ken Dibble
This could have easily have turned out in a digital 9/11 a few times over. http://gigaom.com/2013/09/16/belgian-telco-says-it-was-hacked-while-reports-point-to-nsa-or-gchq-as-culprit/ I am absolutely opposed to any effort by the US government to eavesdrop on email, or any other

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Paul Hill
On 21 September 2013 01:34, Ken Dibble krdib...@stny.rr.com wrote: Can anyone tell me how a passworded zip file can be a threat? Probably because the virus scanner cannot open it. -- Paul ___ Post Messages to: ProFox@leafe.com Subscription

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Ted Roche
On Fri, Sep 20, 2013 at 8:34 PM, Ken Dibble krdib...@stny.rr.com wrote: Can anyone tell me how a passworded zip file can be a threat? http://bit.ly/1exqlOT If the zip file contains malware, it has to be unzipped before the malware can operate, right? And how can a user unzip a file for

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Alan Bourke
As long as you have no users that know the password, or no users that do know the password but can recognise suspicious contents in the zip file, I wouldn't say they are a vector you need to worry about. Your virus scanner will probably throw a wobbly because it can't scan inside them though.

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Ken Dibble
Can anyone tell me how a passworded zip file can be a threat? Probably because the virus scanner cannot open it. Yup, that part I got. But to my mind, the fact that the virus scanner can't scan it doesn't render it a threat. It only becomes a threat if somebody can actually execute the

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Ken Dibble
Can anyone tell me how a passworded zip file can be a threat? Um. I'm not sure. Let me google that for you... http://bit.ly/1exqlOT Well yeah, I actually did that exact Google before I sent this message. It's people's reasoning that I don't understand. And how would a user get a

RE: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Allen
Don't believe it. Google is listening all the time. Put the hosts file on your computer and see. Al -Original Message- What are the odds that the recipient actually had a recent conversation about a file with a person chosen at random by a bot to put in the From field of that email?

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Ted Roche
On Sat, Sep 21, 2013 at 12:49 PM, Ken Dibble krdib...@stny.rr.com wrote: Well yeah, I actually did that exact Google before I sent this message. It's people's reasoning that I don't understand. I thought you would :). It's people in dead-end, low-wage, low-morale work whose job it is to open

RE: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Ken Dibble
Don't believe it. Google is listening all the time. Put the hosts file on your computer and see. Not a problem. I wear my tinfoil-covered colander on my head at all times. Ken Dibble www.stic-cil.org ___ Post Messages to: ProFox@leafe.com

RE: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Allen
What??? No pyramid? Al -Original Message- From: ProfoxTech [mailto:profoxtech-boun...@leafe.com] On Behalf Of Ken Dibble Sent: 21 September 2013 20:53 To: profoxt...@leafe.com Subject: RE: [NF] How Can Passworded Zip Files be Dangerous? Don't believe it. Google is listening all the time

RE: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread John Harvey
Passworded Zip Files be Dangerous? On Sat, Sep 21, 2013 at 12:49 PM, Ken Dibble krdib...@stny.rr.com wrote: Well yeah, I actually did that exact Google before I sent this message. It's people's reasoning that I don't understand. I thought you would :). It's people in dead-end, low-wage, low-morale

RE: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Ken Dibble
I was once at a conference on security and a guy from NASA told the story of how they wrote their own virus and put it on a floppy labeled something about sex, naked women or something like that, and within a few days it was on almost every computer in the place I have never understood the

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Ken Dibble
Well yeah, I actually did that exact Google before I sent this message. It's people's reasoning that I don't understand. I thought you would :). Well, what I actually meant to say is that I did that Google before I sent the *first* message. :) What are the odds that the recipient

Re: [NF] How Can Passworded Zip Files be Dangerous?

2013-09-21 Thread Ted Roche
On Sat, Sep 21, 2013 at 4:20 PM, Ken Dibble krdib...@stny.rr.com wrote In theory, theory and practice have the same outcome. In practice, not so much. Wasn't that Yogi Berra? Well, in theory. He also said, I never said most of the things I said. -- Read more at

[NF] How Can Passworded Zip Files be Dangerous?

2013-09-20 Thread Ken Dibble
Okay, I know that I can sometimes be too literal in responding to things. And I know that I am insufficiently devious when thinking about computer security threats. I also have this orientation towards using a risk-benefit analysis approach to addressing security threats that does not seem to