Test - Wikitech-l - lists.wikimedia.org

List overview All Threads
Download

Test

User-specified JavaScript...

Article vs. EditPage functionality

brion＠pobox.com

31 May 2006 31 May '06

2:18 a.m.

It's the long-awaited film version of the Broadway hit. The message sent as a binary attachment.

Reply

Show replies by date

Brion Vibber

31 May 31 May

3:28 a.m.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For what it's worth, a) Any attachment nasties from the random virus / worm claiming my name are stripped automatically. b) I've now placed my address under moderation for this list. ;) - -- brion vibber (brion @ pobox.com)

...PGP SIGNATURE...

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEfUWQwRnhpk1wk44RAnh7AJ9J+N9BSP556dpxrU3uIyC4DzO/vwCg0OoR TxX9tFq4yb1Hxq/BPLp31Sw= =QrMt -----END PGP SIGNATURE-----

Reply

Jay R. Ashworth

10:35 a.m.

On Wed, May 31, 2006 at 12:28:16AM -0700, Brion Vibber wrote:

a) Any attachment nasties from the random virus / worm claiming my name are stripped automatically.

Don't forget "and writing style". :-)

b) I've now placed my address under moderation for this list. ;)

About damn time. Cheers, -- jr 'closed captioned for the humor impaired' a -- Jay R. Ashworth jra(a)baylink.com Designer Baylink RFC 2100 Ashworth & Associates The Things I Think '87 e24 St Petersburg FL USA http://baylink.pitas.com +1 727 647 1274 A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing on Usenet and in e-mail?

Reply

Platonides

10:48 a.m.

When i first read it, the 'Hello' mail i thought it was from the script. Of course, if it had retained the attachment it'd been more supicious. The test was clearly fake. The old tricky faked From: field. You can check at its header: Original-Received: from pobox.com (unknown [85.104.219.99]) by mail.wikimedia.org (Postfix) with ESMTP id 7F30417E5EF You can see it identifies as pobox.com but it's not pobox.com! host name : pobox.com address : 207.106.133.28 address : 85.104.219.99 host name : dsl85-104-56163.ttnet.net.tr So it seems from a dialup. The ip belongs to TurkTelekom | Turk Telekom ADSL-alcatel. It was probably automatically originated by a virus. It seems like a W32/lovgate http://www.sophos.com/virusinfo/analyses/w32lovgatez.html BTW, Brion. How do you sent that email without getting the mailist signature?

Reply

Chad Perrin

7:03 p.m.

On Wed, May 31, 2006 at 04:48:09PM +0200, Platonides wrote:

When i first read it, the 'Hello' mail i thought it was from the script. Of course, if it had retained the attachment it'd been more supicious. The test was clearly fake.

This is one of those times that I'm happiest to be using a text-only MUA, too. -- Chad Perrin [ CCD CopyWrite | http://ccd.apotheon.org ] "The measure on a man's real character is what he would do if he knew he would never be found out." - Thomas McCauley

Reply

6576

days inactive

6576

days old

wikitech-l@lists.wikimedia.org

Manage subscription

4 comments

5 participants

tags (0)

participants (5)

Brion Vibber
brion＠pobox.com
Chad Perrin
Jay R. Ashworth
Platonides