On Wed, 09 Jul 2014 05:44:34 +0200
Karsten Bräckelmann <guent...@rudersport.de> wrote:

> If you deliberately try to sneak past sensible security measures, you
> should not be surprised to be blocked. The attempt by an honest user
> to disguise any $file (he did it on purpose, so he knows there's
> issues with that) is in no way better than a dis-honest user
> disguising a file.

Since implementing this rule, I have been *shocked* to discover that a
large data processing company (name hidden to protect the guilty)
sends out information about credit-card processing in the form of
obfuscated Microsoft Windows executable files!!!  (They're renamed to
end in ".ex" instead of ".exe")  I tried running one of these files inside
Wine.  It's a "PGP Self Decrypting Archive" that asks for a passphrase.

The mind boggles!  *THIS* is the state of Windows "security" best practices?

Regards,

David.

Reply via email to