Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]

Re: GMail blocking "executable" attachments

Subject: Re: GMail blocking "executable" attachments
Date: Wed, 20 Apr 2005 16:41:57 -0500
I'd rather see a virus scan than an arbitrary extension block. Though
some might consider it a security breach, I think a systematic deep
scan for malicious files would be more effective. Outlook per default
has blocking methods for executables that can be highly annoying when
they are known not to be malicious, this is my reason for having a
more in depth, 'personalized' solution rather than a generic one.

On 4/19/05, Scovetta, Michael V <Michael.Scovetta@ca.com> wrote:
All-

I've noticed that G-Mail blocks attachments that contain "executable"
files. (A zip file containing an .MDB, and even a zip file containing a
zip file containing an .MDB). I assume they'd block all the usual
suspects, but isn't that sort of the point of sending e-mails with
attachments? Renaming the enclosed .MDB to .TXT allows it to be send
through, so it's not really a major problem. Do you think Google should
be deep-scanning the files for content, or just the extension, and would
running a virus detector against it be just as good?

No real issue here, I just thought it was interesting-not sure if other
major email providers do the same thing.

Regards,

Michael Scovetta
Computer Associates
Senior Application Developer




-- 
-Wilfried Schobeiri
nphase@gmail.com
http://www.infinitefour.com
http://www.depushed.com

<Prev in Thread] Current Thread [Next in Thread>