Post

sophie alpert
@sophiebits.com

parsing is hard

Allan “Ransomware Sommelier” Liska@ransomwaresommelier.com

👀 Novel phising campaign uses corrupted Word documents to evade security via @lawrenceabrams.bsky.social

bleepingcomputer.comNovel phising campaign uses corrupted Word documents to evade securityA novel phishing attack abuses Microsoft's Word file recovery feature by sending corrupted Word documents as email attachments, allowing them to bypass security software due to their damaged state but...
Mike Samuel 🟣
@mvsamuel.bsky.social

For mime-sniffing, doesn't that any content→type heuristic run into the problem that languages are sets of strings, and a string can be in many sets. This is the same problem as charset sniffing that led to UTF-7 attacks. That said, a standardized, predictable heuristic is much better.