search

mandiant / sunburst_countermeasures

BSD 2-Clause "Simplified" License
560 stars 199 forks source link

TEARDROP_2: remove term that FP'd on legit JPEG code #29

Open williballenthin opened 3 years ago

williballenthin commented 3 years ago

background: https://twitter.com/a_tweeter_user/status/1339927755299958784

Neo23x0 commented 3 years ago

That's what I did in my local version as well.

williballenthin commented 3 years ago

worked well during hunting, but those that toss these rules directly into production will get burned.