RLO used in a criminal exploit

RLO used in a criminal exploit

[Eli Zaretskii]

See

   https://securelist.com/zero-day-vulnerability-in-telegram/83800/

Emacs has the bidi-find-overridden-directionality function since Emacs
25.1, but AFAIK no Lisp program uses it to detect and prevent such
malicious attacks.  Sounds like it's high time we started using it in
email and network applications, and elsewhere.

Re: RLO used in a criminal exploit

[Richard Stallman]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

  > Emacs has the bidi-find-overridden-directionality function since Emacs
  > 25.1, but AFAIK no Lisp program uses it to detect and prevent such
  > malicious attacks.  Sounds like it's high time we started using it in
  > email and network applications, and elsewhere.

Thank you for reminding us about this.

Who would like to write these changes?


-- 
Dr Richard Stallman
President, Free Software Foundation (https://gnu.org, https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)
Skype: No way! See https://stallman.org/skype.html.