Date:         Tue, 6 Dec 94 13:11:12 PST
Sender:       Vanagon Mailing List <vanagon@vanagon.com>
From:         Jan Allbright <jallbrig@hpwrc713.mayfield.hp.com>
Subject:      Re: Rumor of the day

> 
> >Yes, but these executables have to be RUN in order to infect a machine,
> >right?  I think this is where the confusion is.  Just downloading
> >something through e-mail (and not running it) is an unlikely way to
> >"contract" a computer virus.
> 
> This sounds to me like a DOS thing.  You should always scan stuff with
> your favorite viral software before you run anything you get off BBS's and
> the net anyway.

It is rumors like this one that keep people like me in work (*sigh*)

  a. The Internet Work sent a file, a decode and then an execuite
     vie email (check the | command). No one ever read that mail. The
     _bug_ in SMTP was the subject of a CERT advisory and all sendmail
     code on all UNIX machines has been updated.
     
  b. Viruses only attack via an execuatable...there are no viral GIFs
     (for example). HOWEVER...running uudecode on something like
      _vw.gif_ that is really /etc/passwd ... but if you permissions
      are set correctly...this will not happen.
      
  c. Getting code off BBS's is always risky...I always v_scan every thing
     that comes within running distance of my machine...
     
Regards,
--
/----------------------------------+------------------------------------\
|       Mr. Jan C. Allbright       |      Hewlett-Packard Company       |
|   North American Response Center |     100 Mayfield Ave. MS 37UM      |
|        UNIX Networks Group       |      Mountain View, Ca. 94043      |
|      jallbrig@mayfield.hp.com    |            415.691.3026            |
\--------------------(Opinions Expressed Are My Own)--------------------/