Hacker News
points by nxobject 1 day ago | 0 comments
Now I'm curious: what was in the watermark that would trigger Outlook? (I'm having some fun speculating. My guess right now is a ye olde "bu¥ vi@gr@ ch33p!!!!" spam trigger.)
[–] jacquesm 1 day ago
No, it was a bit more subtle than that but I'm definitely not going to post the secret sauce in an open forum. The trick is to trigger the filters in a way that they'll block the mail completely, not just spam trap it.
[–] nojs 1 day ago
Aren’t you running a high risk of your own email or other cloud accounts getting flagged doing this? What if your email provider (‘s AI agent) had permanently banned your account?
[–] notatoad 1 day ago
i think the point is that you're not sending these docs over email, and they never actually trigger the filter they might trigger. if you're emailing docs containing the "don't email me" trap often enough that you get your account flagged, you've got bigger problems.
[–] jacquesm 1 day ago
That's a risk, but not as big a risk as a report escaping quarantine.
[–] Geezus_42 20 hours ago
Zix/Appriver outbound quarantine was built for exactly that purpose.
[–] Geezus_42 20 hours ago
It usually takes more than one email unless its flagged as having malicious contents.
[–] rzzzt 1 day ago
Joining in on the speculation game: the EICAR string maybe?
[–] LelouBil 1 day ago
Oh I didn't know about this thing, thanks for the discovery.
[–] hosteur 23 hours ago
EICAR?
[–] b3lvedere 22 hours ago
[–] hosteur 21 hours ago
Indeed. My comment was meant as a guess on what they put in their watermark.
[–] b3lvedere 20 hours ago
Ah, i see. Apologies.