Be careful who you trust. A cracker spoofed a security mailing list into believing that s/he was a bestselling (and widely derided) security expert, with a message that claimed to have located a vulneratbility in a popular ftp server. The message had an attachment, the sourcecode for a patch that would close the hole — nominally. Actually, what the code did was erase all the important files on your hard-drive, but only if you compiled it and ran it, which many of the readers on the list did. D’oh. Link Discuss (via Meerkat, with corrections from Dan)