This post originated from an RSS feed registered with Java Buzz
by Matt Quail.
Original Post: Get those idiots off my internet
Feed Title: Matt Quail's Java blog
Feed URL: http://fisheye.cenqua.com/category/java/feed/
Feed Description: The latest java related logs from Matt Quail's blog at madbean.com
Okay, tell me if you see what is wrong with this scenario:
Alice's computer is infected with the
Novarg (Mydoom) worm.
Alice has some HTML on her computer that includes Bob's and Charlie's email addresses.
Novarg finds those addresses, and send itself to Bob, but uses Charlie's address in the
From: field. That is, the From: address is spoofed.
The oh-so-smart people at Bob's company have installed anti-virus filters on their
email system.
These filters detect the Novarg virus in the email sent from Alice's computer (which appears to be from Charlie).
It is well known that the Novarg virus spoofs the From: address.
These filters send a 'bounce' email back to the
spoofed sender telling them the email they just sent contained Novarg.
Charlie gets this stupid bounce message (infact, he eventually gets hundreds of them);
not just because Alice has a virus, but because of the stupid email filters at Bob's company.
Now, listen up all you oh-so-smart email administrators, and all you oh-so-smart anti-virus programmers.
GET OFF MY INTERNET!