News for hackers. Stuff that matters.

A comment on Starting emails with "BEGIN PGP MESSAGE" will fool the filter. Parent comment

Re:Starting emails with "BEGIN PGP MESSAGE" will fool the fi... by mrgoldenbrown on Wednesday May 15, 2024 @03:56PM (#40371606)
Our mail filter inspected zip files even if you renamed them to .txt or jpg, and if it couldn't check the contents because of encryption it would just delete the whole zip. It would also look for data that might be PCI related and flag that as well.
[ Parent | on HN ]
Re:Starting emails with "BEGIN PGP MESSAGE" will fool the fi... by userbinator on Wednesday May 15, 2024 @08:23PM (#40373941)
That's when you start using the steganography.
[ Parent | on HN ]
Re:Starting emails with "BEGIN PGP MESSAGE" will fool the fi... by kccqzy on Wednesday May 15, 2024 @09:26PM (#40374305)
Another thing I've heard of is that commonly people include the password for the encrypted zip inside the email, so email filters have learned to try to decrypt the zip using every single word in the original email.
[ Parent | on HN ]
Re:Starting emails with "BEGIN PGP MESSAGE" will fool the fi... by srockets on Wednesday May 15, 2024 @11:56PM (#40375062)
Then I wouldn’t dare emailing a zip bomb with a message containing the password and an instruction not to try and unzip that file.
[ Parent | on HN ]
Re:Starting emails with "BEGIN PGP MESSAGE" will fool the fi... by consp on Thursday May 16, 2024 @05:12AM (#40376484)
Another good reason to always send the passphrase via another channel.
[ Parent | on HN ]
Re:Starting emails with "BEGIN PGP MESSAGE" will fool the fi... by nkrisc on Thursday May 16, 2024 @07:05AM (#40377016)
Use a space in your password.
[ Parent | on HN ]
Re:Starting emails with "BEGIN PGP MESSAGE" will fool the fi... by kccqzy on Thursday May 16, 2024 @10:48AM (#40379125)
This is an also a good strategy to prevent a good chunk of actual users from decrypting the zip.
[ Parent | on HN ]