Re: user doc for email attachments and web surfing

["Jim Franz" <franz400@xxxxxxxxxxxx>]

email question - do we need to fear anything in an email with no 
attachments (other than spoofed links) ?
jim

----- Original Message ----- 
From: "Lukas Beeler" <lukas.beeler@xxxxxxxxxxxxxxxx>
To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
Sent: Friday, November 14, 2008 2:35 PM
Subject: Re: [PCTECH] user doc for email attachments and web surfing


> On Fri, Nov 14, 2008 at 8:28 PM, Bill <brobins3d@xxxxxxxxx> wrote:
> > That's ok, I strongly disagree with you.  You can educate all you want
> > about not opening attachments that are not expected, blah blah blah.
> > All it takes is an email from the President of the company with an
> > attachment that says "Organizational Announcement" and bam, every PC in
> > the company is infected if their AV software doesn't catch it first.
>
> Why would your e-mail system accept unauthenticated mails from the
> outside with an internal sender?
> Why wouldn't your mail client block executable attachments?
>
> Besides, your argument doesn't invalidate my point, which boils down
> to: do both.
>
> AV software is far from perfect, and it will _NEVER_ work against
> targeted attacks, which is exactly what most companies want to protect
> against - there, only draconian system policies and proper user
> education can help.