Received: by 2002:ab2:60d1:0:b0:1f7:5705:b850 with SMTP id i17csp1378162lqm; Thu, 2 May 2024 12:53:55 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCUuNx+mXZmzw5okWgUVp93NGYocIMCN7doG6sslFlCcYbpE7hPhnqYHCT3CZOpCNt39rnsX2cgDM9T6fMUzy7XjzqVsJiY6DNBxc3x4CA== X-Google-Smtp-Source: AGHT+IE+GmXX3xQ4HeamlI2F2QsxPKrZwE8oNtwvu2ity5afEkUzDWZxop5Difm9ZNBGZ3kOxOkY X-Received: by 2002:a05:6214:260f:b0:6a0:cd8e:2ff8 with SMTP id gu15-20020a056214260f00b006a0cd8e2ff8mr674854qvb.46.1714679635707; Thu, 02 May 2024 12:53:55 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1714679635; cv=none; d=google.com; s=arc-20160816; b=hwXe7D7oBosbPsDDDnxafVnS3wzunl/nc7ebUs8FmZizJTHkiWH0RSl7YaW5v0Qv4M 8SiOmfU5mzEdwoYUYzInaowe3YMXa+iT6A4/woB1s1PCeif48kfrIWL/PBwXwOvg/rTv cFByCeMK/KwrJTasm1us0sqgcLOrW7DpLQdgC7caf/WLQewIREV0CkXzw0BurY2k0lkR ZxzY1xAnXaUbnPBNLDZERUFwcCrNjlwkblDaSvUaDSTng/gcxijxOXmu6x8UlD8UN3cN 2XZRk7dOtr96runKS7LakfbrJ/bBULhVGgb8fI/+k216NgWjDFbgvY1OxjY8vVZz4i0c HJ+A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=subject:user-agent:in-reply-to:content-disposition:mime-version :references:message-id:to:from:date:delivered-to:delivered-to :reply-to:list-id:list-subscribe:list-unsubscribe:list-help :list-post:precedence:mailing-list; bh=O0PXYtslttTjvkU0ca394yobqsonPrghEBCub8M3YcI=; fh=9jsPTyo6edd9xvAeG+KFFrRrXMmgB/RdwUKOrvy9dcA=; b=h7BVhA9+gD+AsVCpTimLhijAOEaSPoz/ZsW5qhw5ddsNtCl0p/ieecuaiz4qNrAdqa cZ6sW+KXDylzSj7iL0gGo6xc9S/lzZoE5LEtuGlHyFbEcT8EEyVolc2or33dC4LOkYQs 6fzwz5Equy7IUeIaSHt9aXnwAuNs8xAGtFxpcny0XnVNLo8jYgcAWKeziQ3ZNFmdD6QJ Dbz9cRen4/I8384JxATWRRdWY+IbWgT9P+1JMyEyRsHaVgs2L99UzTR/b08kFuRS5u7i G57Mg8zfGIv7IKxAYuX4h9KJ7pZQVYdR1HIJcRLEa1LlM5y7FA/pkfyh61+uf4T+iImO lsIg==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of oss-security-return-30113-linux.lists.archive=gmail.com@lists.openwall.com designates 193.110.157.125 as permitted sender) smtp.mailfrom="oss-security-return-30113-linux.lists.archive=gmail.com@lists.openwall.com" Return-Path: Received: from second.openwall.net (second.openwall.net. [193.110.157.125]) by mx.google.com with SMTP id jl9-20020ad45e89000000b006a0c9628a85si1763371qvb.263.2024.05.02.12.53.55 for ; Thu, 02 May 2024 12:53:55 -0700 (PDT) Received-SPF: pass (google.com: domain of oss-security-return-30113-linux.lists.archive=gmail.com@lists.openwall.com designates 193.110.157.125 as permitted sender) client-ip=193.110.157.125; Authentication-Results: mx.google.com; spf=pass (google.com: domain of oss-security-return-30113-linux.lists.archive=gmail.com@lists.openwall.com designates 193.110.157.125 as permitted sender) smtp.mailfrom="oss-security-return-30113-linux.lists.archive=gmail.com@lists.openwall.com" Received: (qmail 26065 invoked by uid 550); 2 May 2024 19:53:38 -0000 Mailing-List: contact oss-security-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-ID: Reply-To: oss-security@lists.openwall.com Delivered-To: mailing list oss-security@lists.openwall.com Delivered-To: moderator for oss-security@lists.openwall.com Received: (qmail 25709 invoked from network); 2 May 2024 19:53:21 -0000 Date: Thu, 2 May 2024 21:53:19 +0200 From: Solar Designer To: oss-security@lists.openwall.com Message-ID: <20240502195319.GA19209@openwall.com> References: <20231221143630.GD14101@suse.de> <20240430224823.uA8Nr1Cp@steffen%sdaoden.eu> <20240502182146.ygWZjB-Z@steffen%sdaoden.eu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20240502182146.ygWZjB-Z@steffen%sdaoden.eu> User-Agent: Mutt/1.4.2.3i Subject: Re: [oss-security] New SMTP smuggling attack Steffen, On Thu, May 02, 2024 at 08:21:46PM +0200, Steffen Nurpmeso wrote: > Please let me elaborate a little more on this, not to be > misunderstood and also.. This reads like an excuse to post lots of thoughts that are off-topic for this thread. I understand that sometimes discussions wander off the original topic, but in this case the second half of your message is totally irrelevant. I approved this one message anyway out of respect for the time you spent writing it, but please be aware that I am unlikely to do that next time you do something like this. I also ask others to please refrain from following up on parts irrelevant to this thread's original topic. Another reason I post this reply publicly is not to give the impression that it's OK to hijack threads here. Alexander