Le lundi 28 novembre 2016, 10:28:03 CET Paul Kosinski a écrit :
> Of course, if anybody is able to find out what the magic filename is,
> they could mount a targeted attack.

Of course, but thanks for the warning.

> How are the PDFs generated? Would it be possible to attach a
> cryptographic signature to asset to their validity? (That would
> probably require an additional step on receipt as well as transmission
> to indicate they were OK in spite of ClamAV's red flag.)

Unfortunately we have no control on those PDF creation.

Bests,
-- 
Mathieu

_______________________________________________
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to