[Mimedefang] Re: Image spam and broken file formats

Kenneth Porter shiva at sewingwitch.com
Tue Dec 5 19:01:19 EST 2006


--On Tuesday, December 05, 2006 2:04 PM -0800 Scott Silva 
<ssilva at sgvwater.com> wrote:

> But there is a lot that can be added to an image without breaking the
> image. Just look at steganography. You can hide a lot in an image and
> still render it with no visible traces.

But you can do that without violating the format. Hiding data in low-order 
bits of pixels is particularly innocuous.

What I'm thinking might be low-hanging fruit is bad headers, data beyond 
the end of the format, and compression bombs.





More information about the MIMEDefang mailing list