miriam_e: from my drawing MoonGirl (Default)
[personal profile] miriam_e
Despite many attempts to supersede it, straight ASCII text continues to live on.

All manner of mutually incompatible wordprocessor formats have been developed in attempts to displace it. None has succeeded -- even supremely powerful Microsoft's own Word format, a strange format that is incompatible with everything else including later incarnations of itself, has made only limited inroads against the humble straight text format. PDF has tried very hard to replace simple text, but it remains a doomed, backward-looking format for people who never understood the electronic age and retain an atavistic fetish for paper.

Only one format has succeeded in becoming at least as popular as ordinary text, and that is HTML, thanks to the web. But HTML won't ever supplant text because instead of competing with it, HTML actually uses ordinary text in a cunning technique to display different fonts and styles and to insert images.

In recent years HTML has begun to invade email -- one of simple text's most strongly held territories. But in an odd turn of events HTML's attractive styles and flexibility are proving an impediment, as spammers now use HTML's hidden tags to evade spam filters, and embedded images to identify people who view email. This has caused many people to simply spam-filter all unknown email to the trash if it contains HTML tags. This may be resulting in a slow return to using simple, honest, text emails.

Text has also experienced a popular resurgence lately in the form of SMS messaging. It will probably always be the most economical way to transfer information from keyboard to screen.

In the end, if you want to guarantee that your audience can read your message then simple text is still the only 100% sure bet. After about half a century of computing this is still true, and perhaps will always be.

Re: How very true!

Date: 2005-02-01 12:39 am (UTC)
From: [identity profile] miriam-e.livejournal.com
I'm interested in what you mean by "Unicode/locale based exploits". Do you mean that nasty individuals have found ways to compromise a computer's security, or do you mean that spammers have been using it to find live addresses when people open such emails?

The best security against MSOutlook is to simply not use it. :)

I use Mozilla mail. I used to use Eudora, but it wasn't seeing some emails sent by people from within MSWord. I have a sneaking suspicion that the invisibility of those emails was intentional on Microsoft's part in an attempt to cripple Eudora, but I guess I should look to that old maxim: never attribute to conspiracy what can be adequately explained by incompetence. On the other hand it seems odd that Microsoft would stray accidentally from the universal mail standard in such a way that would coincidentally damage one of their major competitors.

Re: How very true!

Date: 2005-02-02 06:49 pm (UTC)
From: [identity profile] exileinparadise.livejournal.com
There are a lot of exploits that have appeared over the years as OS vendors move to include more and more localization in their OS and apps.

The exploit comes from the move in String and Pointer handling code from dealing with 7/8-bit ASCII characters to dealing with 16-bit Unicode characters, new font-processing logic, or the move for applications to allow changeable message sets to provide for localization.

Mishandled string buffers and font conversions and the like create exploitable buffer overflow vulnerabilities.

Programs like Internet Explorer handle arbitrary string input (from webpages/webservers made by just anyone) and have to do a lot of processing on fonts, character set encodings, the the basic text. Even a single C pointer mismatch could open a vulnerability, when dealing with programs as complex as IE

String buffer exploits can happen to any program that processes arbitrary inputs into buffers.

More info: http://securityfocus.com/library/category/29

Profile

miriam_e: from my drawing MoonGirl (Default)
miriam_e

February 2026

S M T W T F S
123 4567
891011121314
15161718192021
22232425262728

Style Credit

Expand Cut Tags

No cut tags
Page generated Wednesday, 4 February 2026 03:55 pm
Powered by Dreamwidth Studios