News for hackers. Stuff that matters.

A comment on Man who thought opening a TXT file is fine thought wrong. Parent comment

Re:Man who thought opening a TXT file is fine thought wrong by extropy on Saturday April 03, 2021 @03:47AM (#26679076)
IMO not so much. Just assume all files are malicious unless accompanied by metadata saying otherwise. That is pretty much the status quo already.

Except we have some grandfathered file types that are implicitly trusted.

[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by Jabbles on Saturday April 03, 2021 @04:03AM (#26679150)
In the article, the remote file's contents were not malicious, but merely trying to access it was. That would require a very different security posture to "assume all files are malicious".
[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by DyslexicAtheist on Saturday April 03, 2021 @05:32AM (#26679551)
> the remote file's contents were not malicious

until ... one day ... they are!

[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by boomlinde on Saturday April 03, 2021 @05:52AM (#26679650)
The remote file is only one of two files in the story.
[ Parent | on HN ]
Re:Man who thought opening a TXT file is fine thought wrong by Lucasoato on Saturday April 03, 2021 @04:03AM (#26679154)
And what about malicious metadata?
[ Parent | on HN ]