• Bug#265168: Mutt doesn't allow PGP spoofing by default

    From Adeodato =?iso-8859-1?Q?Sim=F3?=@1:229/2 to All on Sat Aug 21 06:10:07 2004
    From: [email protected]

    * Jan Minar [Thu, 19 Aug 2004 20:31:06 +0200]:

    If You disagree, consider the following three scenarios (this mail is
    getting looong, I'm sorry about that):

    (1) Joe thinks brightwhite rulez, so he says:

    color attachment brightwhite default

    in his ~/.muttrc. He doesn't know ^H-highlighting is possible. He
    was using hotmail up to yesterday, and is very happy about the
    switch. He read the whole mutt manual, and he knows he must leave
    allow_ansi unset. He's vulnerable.

    (2) Jo doesn't care about colors that much. She's pretty comfortable
    with the Debian defaults (well, not *all* the Debian defaults, but
    the colors are OK). Once she saw a lame attempt to spoof a
    PGP-signed email. Bah! She wasn't impressed. She knows the
    delimiters must be *highlighted*. Maybe she's colorblind, maybe she
    has better things to think of. She's vulnerable.

    in my previous mail I took your whole reasoning with a "forgetting
    about the timestamp" clause and proved the default setup safe for 99%
    users.

    now you come bitching about the remaining 1%, so I remove that clause
    and say: EOB.

    (3) Jan takes a .muttrc from his friend. He's bitching about the mutt
    authors and maintainers all the time. One of the reasons is he had
    to read the mutt manual multiple times, just to be able to (un)set
    some fscking variable to what should've been its default. He can
    recite the allow_ansi warning by heart. He wrote a whole tract to
    bugtraq & debian BTS. He didn't grasp what was the problem,
    although he tried the example sploit he devised on a fresh mutt
    installation. He was vulnerable.

    that pours some light.

    have a nice day,

    --
    Adeodato Sim�
    EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621

    Military justice is to justice what military music is to music.
    -- Groucho Marx



    --
    To UNSUBSCRIBE, email to [email protected]
    with a subject of "unsubscribe". Trouble? Contact [email protected]

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)