5 ms·
This is likely the spam filter scanning over the Links it finds in the E-Mail not actually something spitting the mail content into log4j (and I mean honestly,
by zaarn 5y ago
This is likely the spam filter scanning over the Links it finds in the E-Mail not actually something spitting the mail content into log4j (and I mean honestly, why would you even do that?)
- SahAssar 5y agoHow would that work with e2e encryption? What spam filter system would even follow ldap links?
- zaarn 5y agoProton is not e2e for mails coming from outside Proton, if they aren't GPG encrypted. And in that case they apply very standard spam filters to your mail.
- jsnell 5y agoThat should be quite easy to check, by changing the URI scheme and rerunning the experiment.
- zaarn 5y agoUnlikely, spammers tend to get creative to bypass spam filters, it would probably scan anything that looks like a URL or Domain just to see if the IP behind it is sus.
- jcims 5y agoThat’s the point. You’ll still get a hit. If it’s the RCE you won’t. Just went through this with an email security provider, would get 3-4 pings with log4j payloads, 2-3 with inert ones.
- zaarn 5y agoYou're free to experiment, though the ProtonMail team has already responded upthread that this is in fact their SpamFilter.