-----BEGIN PGP SIGNED MESSAGE----- I want to tell you what Alfred Qaeda <cypherpunks@ssz.com> said about "CDR: A note to virus authors" on 5 Dec 2001 at 14:31
"The subject line says 'Hi' [...]
Authors, How can you put so much effort into writing cool virii and do such an amateur job on the social engineering?
Include a hundred different, likely sounding subject lines (encrypted of course, but you knew that). A single constant subject line is *so* easy to warn against.
But a short, simple and commonly used subject line is almost impossible to filter automatically without triggering a large volume of false positives. Yes, there are better ways to filter out this stuff, but if that was so easy why is this piece of e-performance art so widespread? The social engineering lies in the interminable curiosity of the human beast, in spite of Management's best warnings. -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 -- QDPGP 2.65 Comment: Ensure confidentiality, authenticity, non-repudiability iQCVAwUBPA/mvqLoCveuM+mJAQFB2gP+MdMfl+A+4isr14EnpvmAAnU5PLW7nAeP 0joJ6HcSBrhFUjVebXzcgGQa2NyVrRX6ZIHrkc66upp0Pv76/O07yPvrgPoN5HSj XPNvRoZlnmyXtsQOKvaSMPW16VcIMeS2DiUbKMsFqxf5efCBNAZhjCyPRV91/uJR S/FYd+eT3+Y= =Cp75 -----END PGP SIGNATURE-----