11–20 of 53 posts
This is likely the spam filter scanning over the Links it finds in the E-Mail not actually something spitting the mail content into log4j (and I mean honestly, why would you even do that?)
This is likely the spam filter scanning over the Links it finds in the E-Mail not actually something spitting the mail content into log4j (and I mean honestly, why would you even do that?)
How would that work with e2e encryption? What spam filter system would even follow ldap links?
This is likely the spam filter scanning over the Links it finds in the E-Mail not actually something spitting the mail content into log4j (and I mean honestly, why would you even do that?)
That should be quite easy to check, by changing the URI scheme and rerunning the experiment.
Earlier quoted context omitted.
That should be quite easy to check, by changing the URI scheme and rerunning the experiment.
Unlikely, spammers tend to get creative to bypass spam filters, it would probably scan anything that looks like a URL or Domain just to see if the IP behind it is sus.
Earlier quoted context omitted.
How would that work with e2e encryption? What spam filter system would even follow ldap links?
Proton is not e2e for mails coming from outside Proton, if they aren't GPG encrypted. And in that case they apply very standard spam filters to your mail.
They have already being known to log emails when enforced by the Swiss authorities: https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre... https://protonmail.com/blog/transparency-report/ —— In case you trust Swiss companies blindly: https://en.wikipedia.org/wiki/Crypto_AG https://www.thebureauinvestigates.com/stories/2021-12-06/swi...
In case you trust any company blindly: any company that wants to keep playing the money game will follow the laws forced upon them by the government they are beholden to.
Earlier quoted context omitted.
Proton is not e2e for mails coming from outside Proton, if they aren't GPG encrypted. And in that case they apply very standard spam filters to your mail.
I assumed that the OP was sending from proton, to proton but looking at the screenshot again I guess that's not clear.
Earlier quoted context omitted.
Unlikely, spammers tend to get creative to bypass spam filters, it would probably scan anything that looks like a URL or Domain just to see if the IP behind it is sus.
That’s the point. You’ll still get a hit. If it’s the RCE you won’t. Just went through this with an email security provider, would get 3-4 pings with log4j payloads, 2-3 with inert ones.
They have already being known to log emails when enforced by the Swiss authorities: https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre... https://protonmail.com/blog/transparency-report/ —— In case you trust Swiss companies blindly: https://en.wikipedia.org/wiki/Crypto_AG https://www.thebureauinvestigates.com/stories/2021-12-06/swi...
They have already being known to log emails when enforced by the Swiss authorities: https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre... https://protonmail.com/blog/transparency-report/ —— In case you trust Swiss companies blindly: https://en.wikipedia.org/wiki/Crypto_AG https://www.thebureauinvestigates.com/stories/2021-12-06/swi...