RE: Why Anti-Virus Software Cannot Stop the Spread of Email Worms

[Jason Wilcox <JasonW@4CS.COM>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

 Unless of course

Step1: Is nearly impossible
Step 2: Ok yes you can do this, but then of course you must make sure that
people don't change it back!!!

Step 3: You use these types of scripts for administration purposes which is
becoming increasingly popular to do.

Jason P. Wilcox

-----Original Message-----
From: A.T.Z.
To: firewalls@Lists.GNAC.NET
Sent: 5/12/00 2:31 AM
Subject: Re: Why Anti-Virus Software Cannot Stop the Spread of Email Worms

Don't think this is firewall stuff, but the solution is very easy.

Step1: teach users to think before click

To make sure they don't take also the following steps:
Step2: Disable automatic running scripts in e-mail (IE5 etc)
Step3: associate vbs js etc with notepad

Solved! No AV needed to do this job.

Bye,

B.


At 18:08 11-5-00 -0400, Matt Curtin wrote:
>After seeing the flood of mail about the latest bit of malware and how
>to filter and to disable it, I decided that it's time to spell out the
>problem in some detail and to make a call for sanity.
>
>    Abstract:
>
>    With the attention received by the ``ILOVEYOU'' worm that floated
>    around the Internet in the early part of May 2000, many people are
>    wondering why their anti-virus software didn't prevent them from
>    becoming infected and how they can protect themselves in the
>    future. Here we argue that this approach to the problem, though
>    popular, is fatally flawed and simply cannot work.
>
>http://www.interhack.net/pubs/email-trojan/
>
>--
>Matt Curtin cmcurtin@interhack.net
http://www.interhack.net/people/cmcurtin/
>-
>[To unsubscribe, send mail to majordomo@lists.gnac.net with
>"unsubscribe firewalls" in the body of the message.]

Met vriendelijke groet,
Advanced Technology Zeeland


B. van Ouwerkerk
Verkoop

A.T.Z. op internet http://www.atz.nl  e-mail verkoop@atz.nl



-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]