Re: [Bug-wget] --trust-server-names

[David H. Lipman]

From: "Micah Cowan" <address@hidden>

> On 04/12/2012 03:13 PM, David H. Lipman wrote:
> > From: "Ángel González" <address@hidden>
> >
> > > On 12/04/12 18:23, David H. Lipman wrote:
> > > > From: "David H. Lipman" <address@hidden>
> > > >
> > > > > Is it possible to add;  --trust-server-names
> > > > > To the WGETRC file ?
> > > > Nevermind.  It wasn't in the version of my documentation but the
> > > > following worked...
> > > >
> > > > trust-server-names = on
> > > You're aware of the risks of downloading files with names controlled by
> > > the server, right?
> > I am downloading deliberately malware such that a download won't be 
> > called
> > "ActiveX-Patch" but will be called "flv_codec_pack_112_full.exe" as the 
> > server intended.
> >
> > But please, tell me the risks.
>
> And how about a server that calls its malware ".bashrc"?

Since it is a non standard named file, I will open it in FileInsight and 
examine the binary.  If I don't recognize its format, I'll run the TrID 
plug-in and detrrmine its format.  I will treat the file accordingly.



--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp