Re: .com

From: dullienat_private
Date: Tue Oct 02 2001 - 11:10:19 PDT

Next message: Tony Lambiris: "Re: AOL IM 4.7 d0s 0-Day"

Previous message: Ed Lopez: "RE: limewire cookie (among others) disclosure vuln"
In reply to: Pauli Ojanperä: ".com"
Next in thread: Enrique A. Sanchez Montellano: "Re: .com"
Reply: Enrique A. Sanchez Montellano: "Re: .com"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hey Pauli,

somehow we're replicating our work ;)

PO> dunno if this has already occurred in people's mind but
PO> as there is the nice similarity between the ancient .com
PO> executable file extension and the tld .com ignorant
PO> clients could be fooled by sending executables that
PO> are named after popular .com www-sites. clear enough?-)

Yes, and most funnily: You don't need to actually have a .com file
in there - The operating system checks for the MZ/ZM signature,
and then hands the file over to the .EXE handler if present. Therefore
you can just rename any .EXE file .com and it will properly execute.

Cheers,
Thomas


-- 
Mit freundlichen Grüssen
dullienat_private                            mailto:dullienat_private

Next message: Tony Lambiris: "Re: AOL IM 4.7 d0s 0-Day"
Previous message: Ed Lopez: "RE: limewire cookie (among others) disclosure vuln"
In reply to: Pauli Ojanperä: ".com"
Next in thread: Enrique A. Sanchez Montellano: "Re: .com"
Reply: Enrique A. Sanchez Montellano: "Re: .com"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Oct 02 2001 - 11:45:01 PDT