I can't fully agree here. Just because you're paranoid (or smart, whatever might be the case ;) you're not 100% safe anyways. You say that one shouldn't open mails from untrusted people, but hey, this one mailed itself to people on your list, thus people you know. It didn't randomly mail itself to FunnyBoy32223 (at) coldmail (dot) com [email concealed], it mailed itself to guy_who_trust_you (at) hismail (dot) com. [email concealed] Sure, he has a virus scanner (and he runs it on the attached .vbs .exe or whatever but it finds no viruses. And as the mail said "My firts Cobol program" he thinks "Hey, cool" and runs it. Oops!

Well, common sence could have blocked ILOVEYOU from downing as much as it did, but it's no "magic bullet". Besides, common sence doesn't exist in this world, not in cyberspace, nor in realspace. People pour McDonald coffee over themselves while driving their car, people tries to pat that barking dog on the head and people open attachments they get from friends.

But, you have a good point, and I think that more information to the users are needed. That would perhaps have saved a few companies...

Regards

Stefan Axelsson

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/32/1818#1818