Subj : Ddge 3.99/SR9/SR16 released and avai
To   : mark lewis
From : Nicholas Boel
Date : Thu Dec 14 2017 03:10 pm

Hello mark,

On Thu Dec 14 2017 01:50:00, mark lewis wrote to Nicholas Boel:

 NB>> And an honest answer in question form: How do you know every
 NB>> intermediate point is clean and clear of virus injection of any
 NB>> kind?

 ml> really? when is the last time you've seen a virus inject itself into
 ml> binaries inside a zip file? are you in the habit of unzipping the
 ml> files where a virus can find the binaries and infest them? think about
 ml> it...

Quite a few BBS softwares have an upload checker, which extracts a zip file and 
injects whatever the sysop defines into it. Think about it.

 ml> and if you miss then you are *that* one... especially if your chosen
 ml> tool(s) don't detect something nefarious... the real ugly is that
 ml> because you made the effort and missed, it is your responsibility...
 ml> this is on the same lines as those ""legal notices"" posted on some
 ml> BBSes where they say they will read every message posted looking for
 ml> illegal activities... that puts them in legal hot water if they miss
 ml> something... better to not do it at all and be safe... besides,
 ml> there's no way to find all possible hidden messages within posts...
 ml> that's a chase game just like virus scanning is a chase game... you'll
 ml> never know you had it until it bites you...

I knew you would veer off on a tangent with this. I'll check the files on my 
own system, with or without your say-so. Thanks though!

Regards,
Nick

.... "Не знаю. Я здесь только работаю."
--- GoldED+/LNX 1.1.5-b20170303
 * Origin: thePharcyde_ distribution system (Wisconsin) (1:154/10)

.