On Sun, 15 Mar 2015, Tommi Koivula wrote to Joe Delahaye:

 TK>> No, that's not safe. Unpack the archive in insecure before 'hpt 
 TK>> toss'.

 JD> If indeed it would be a mail bomb, then unpacking it first before 
 JD> tossing would still create problems I would think.

 TK> When did you last time get a mail bomb? Or heard about one? :) 

just last year... there were a couple of them delivered to numerous systems...
they were not done on purpose, though... they were the result of a faulty
filesystem on the originating machine... i forget the size they were on arrival
but they unpacked to like 100x that... they arrived via a route through several
mail distribution hubs as they were echomail and processed as echomail on
systems with drive space large enough to handle them...

)\/(ark