Post AhubRe8v93KNc7DmoS by martin@nondeterministic.computer
 (DIR) More posts by martin@nondeterministic.computer
 (DIR) Post #AhubRe8v93KNc7DmoS by martin@nondeterministic.computer
       2024-05-15T09:26:58Z
       
       3 likes, 1 repeats
       
       Our university deployed a mail filter that rewrites URLs in emails to redirect them via a service that checks for bad websites. Somebody clever worked out that PGP-signed emails are exempt from the rewrite rule, so now people are starting their emails with "BEGIN PGP MESSAGE" even though they haven't used PGP at all, just to fool the filter 😂Anybody sending malware links has probably also worked out that trick by now, thereby rendering the entire filter pointless
       
 (DIR) Post #Ahuy9EdBYZqMDuZE6C by rinze@paquita.masto.host
       2024-05-15T10:30:11Z
       
       0 likes, 0 repeats
       
       @martin I just tested it in a mailing list I'm subscribed to (I guess Outlook is the offender here --safelinks.protection.outlook.com, etc--?) and it works wonders.
       
 (DIR) Post #Ahuy9GKpDoLTVXzal6 by rinze@paquita.masto.host
       2024-05-15T10:31:11Z
       
       1 likes, 0 repeats
       
       @martin As a nice side effect, it also stops the mail server from prepending the "This mail comes from an external source" disclaimer at the top of the e-mail.
       
 (DIR) Post #AhuyF4CnERpHct0GDg by lanodan@queer.hacktivis.me
       2024-05-15T14:18:37.196717Z
       
       1 likes, 0 repeats
       
       @martin After all, if there is a PGP header, it's an authentic email. :Dhttps://xkcd.com/1181/
       
 (DIR) Post #Ahx7mbVDk5rcM6boeG by piiabartos@mastodontti.fi
       2024-05-15T10:58:38Z
       
       0 likes, 0 repeats
       
       @martin So this is the way... How many times I have been frustrated by the filter changing the URLs so that I can't access the websites. I have resorted to asking people to send the links in an attached file, but this is much simpler.
       
 (DIR) Post #Ahx7md0S9SRP1GEGy8 by zenfrt@sauna.social
       2024-05-15T11:14:54Z
       
       0 likes, 0 repeats
       
       @piiabartos @martin Would this be something implemented by default in, say, all Microsoft Universities? (I would guess not. My university doesn’t do URL rewriting, so I can’t check easily.)
       
 (DIR) Post #Ahx7meFjW8G2swNzQO by tessarakt@mastodon.social
       2024-05-15T14:36:55Z
       
       1 likes, 0 repeats
       
       @zenfrt @piiabartos @martin Microsoft Universities. Ouch. Universität Karlsruhe (TH) used to have Linux systems (at one point they searched for a working student to maintain the NNTP server) until the bureaucrats from the research institution with which it was merged took over, and they introduced enterprise-grade stuff ...