[Spambayes] Spambayes pwning me?

skip at pobox.com skip at pobox.com
Mon Aug 18 13:16:36 CEST 2008


    fu> DEP does not misfire.  Whenever hardware DEP kicks in, some software
    fu> is trying to execute at an address that is not normally designed to
    fu> contain executable code.  This is often the result of a buffer
    fu> overflow or some other software flaw.  These are the flaws that
    fu> allow all kinds of viruses, worms, and other attacks to flourish.

My suggestion in that case then is that Outlook is the place to look for
problems, not SpamBayes (or really, Python).  If Outlook executes some bit
of external code, it's not that bit of code which decides where it will
execute.  Python is tested/examined for stuff like buffer overflows and
other potential problems fairly regularly.  SpamBayes is written in Python
and has no bits written in C.

    fu> The fact that this has been known about and left for three years is
    fu> insane.  Fixing DEP issues is not difficult, unless of course, the
    fu> software has intentionally created this behavior.

As Amedee indicated, patches are always welcome.

Skip


More information about the SpamBayes mailing list