From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.user/1486 Path: news.gmane.org!not-for-mail From: Andrew McDermott Newsgroups: gmane.emacs.gnus.user Subject: Re: ALERT: Emacs GNUS can spread a virus invisibly Date: Tue, 19 Nov 2002 17:06:23 +0000 Organization: Wind River Message-ID: <7mfztxwkts.fsf@modena.swindon.wrsec.fr> References: <87ptt1plj6.fsf@labatt.uhoreg.ca> NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1138668243 11474 80.91.229.2 (31 Jan 2006 00:44:03 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Tue, 31 Jan 2006 00:44:03 +0000 (UTC) Original-X-From: nobody Tue Jan 17 17:29:14 2006 Original-Path: quimby.gnus.org!news.ccs.neu.edu!news.dfci.harvard.edu!news.harvard.edu!iad-peer.news.verio.net!news.verio.net!newsfeed.stueberl.de!fu-berlin.de!uni-berlin.de!212.234.51.75!not-for-mail Original-Newsgroups: gnu.emacs.gnus Original-NNTP-Posting-Host: 212.234.51.75 Original-X-Trace: fu-berlin.de 1037727120 18517510 212.234.51.75 (16 [15782]) X-Orig-Path: mail.swindon.wrsec.fr!nobody User-Agent: Gnus/5.090008 (Oort Gnus v0.08) Emacs/21.1 (i686-pc-linux-gnu) Cancel-Lock: sha1:oY1K8tlIKGe8tCDIWllqoJ1iw/4= Original-Xref: bridgekeeper.physik.uni-ulm.de gnus-emacs-gnus:1626 Original-Lines: 39 X-Gnus-Article-Number: 1626 Tue Jan 17 17:29:14 2006 Xref: news.gmane.org gmane.emacs.gnus.user:1486 Archived-At: Hubert Chan writes: >>>>>> "gm" == Gary Lawrence Murphy writes: > > gm> This took me by complete surprise, and caused a major embarrassment: > gm> Emacs GNUS can be fooled into hiding a virus attachment that is > gm> propagated when the email is forwarded. > > [...] > > gm> The risk here is considerable: Just because the email looks clean, > gm> just because your unix-based email program was immune to the effect > gm> and shows no embedded trap, does not mean there isn't one. > > I have > > (setq gnus-inhibit-mime-unbuttonizing t) > > in my .gnus. That causes gnus to display a list of all the MIME Which version of gnus? describe-variable gives me: "undocumented variable." My gnus is from a daily `cvs up'. > alternatives. (I /think/ that's the variable -- I can't locate > documentation for it to confirm.) I suppose you could also frob > gnus-unbuttonized-mime-types. > > -- > Hubert Chan - http://www.uhoreg.ca/ > PGP/GnuPG key: 1024D/124B61FA > Fingerprint: 96C5 012F 5F74 A5F7 1FF7 5291 AF29 C719 124B 61FA > Key available at wwwkeys.pgp.net. Encrypted e-mail preferred. -- andy