[Esa-l]You may want to poison "Simpsons Episodes"

[Bret Sanders]

Changing the filename on a Mac has no effect, since this wouldn't change
how the Mac runs the file. It still knows the file type from the embedded
file type information. You can call a Word doc 'Letter to Mom.xls' and it
would still run Word when it's opened.

Bret

On Thu, 14 Jun 2001, Murray Crane wrote:

> John,
> 
> On Wed, 13 Jun 2001 21:12:39 -0700 (PDT), John D. Hardin wrote:
> 
> [SNIP]
> >
> >But in v1 it would have to have a specific filename extension.
> 
> As a stop-gap measure, would it not be possible to:-
> 
> 1. Add an extension to all attachments that don't have one (eg '.FOO', by looking for the existance of a period in the filename already), then
> 2. Mangle/Poison 'Simpsons Episodes.FOO' explicitly.
> 
> I can see that a lot of other Mac attachments will get '.FOO', which will certainly confuse the Mac lUsers here, but it would stop this particular Trojan (wouldn't it?)
> 
> Murray Crane
> Sysadmin
> Longbridge International Plc
> _______________________________________________
> E-mail Security Announce list mailing list
> E-mail Security Announce list at spconnect.com
> http://www.spconnect.com/mailman/listinfo/esa-l