SCN: "WARNING-Don't open attachments!!!" (W32/Sircam virus)

[J. Johnson]

There has been much discussion recently about the W32/Sircam e-mail virus,
and properly so.  However, lest we create the conditions of easy credulity
that leads to "Good Times" panic, let's be very careful about our sources.
In particular, _always verify your information_ at an authentic source.
For viruses and other Internet problems one prime authentic source is
"CERT", at www.cert.org.  (They also have links to other sites.)  I highly
recommend CERT as the first place to check regarding any virus, etc.  For
detailed information about W32/Sircam, see CERT Advisory 2001-22. 

Regarding attachments:  this is primarily an issue for _Microsoft_ users. 
If you read your e-mail on SCN you have no problem, because SCN's mail
readers (BBmail and Pine) are not so stupid as to automatically run
anonymously supplied programs.  However, if you connect to some other
site, or download your mail, and then use Microsoft programs to read it,
it is _extremely important_ that you take various precautions.  Note that
the use of anti-virus software is only a palliative--such an approach does
not go to the heart of the problem, which is the underlying software's
excessive complaisance in "executing" code found in attachments.  Note
also that you can NOT--indeed, you MUST NOT--place any assurance in the
apparent origin of the message:  the sender's name and address are likely
misappropriated.  Check the message: does it really sound like the sender
it purports to be?  Is there enough message, and do you know the sender
well enough, that you can confidently rely on such informal
authentication?

If not:  don't open that attachment!  Consider it in the same way you
would an anonymous brown-paper package that goes tick-tick-tick.

=== JJ =============================================================

* * * * * * * * * * * * * *  From the Listowner  * * * * * * * * * * * *
.	To unsubscribe from this list, send a message to:
majordomo at scn.org		In the body of the message, type:
unsubscribe scn
==== Messages posted on this list are also available on the web at: ====
* * * * * * *     http://www.scn.org/volunteers/scn-l/     * * * * * * *