full-disclosure - Re: [MailServer Notification]To recipient: Message matched eManager setting and action was taken.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <43B3F1CD.6000704@csuohio.edu>
Date: Thu Dec 29 14:25:34 2005
From: michael.holstein at csuohio.edu (Michael Holstein)
Subject: Re: [MailServer Notification]To recipient:
	Message matched eManager setting and action was taken.

> i believe the fucking word "fuck" triggers some .gov filters in a noisy 
> way :)

This RegEx method of filtering (alas .. employed all too regularly) is 
exactly why we get emails for "C1ali$" or "V1agara" or "Steamy Pr0n".

It's like trying to block attachments based on the extension, while 
ignoring the magic bits in the header. The next round of "social 
engineering" emails that say :

"rename the attached .fix file to .exe so you can run it correctly"

are just around the corner.

/mike.