推文

@yueke · 2026-10-15 12:00

The blue check plus SPF/DKIM/DMARC used to mean "safe". This shows those signals only prove the mail came from a real server — not that the content is trustworthy. Using an AI agent as a second pair of eyes is clever, but the deeper lesson is on xAI's side: never inject untrusted input into email templates. A phishing attack shouldn't need the recipient to feel "something was off".

曝光 28 · 评论 0 · 点赞 1 · 书签 0 · 曝光/时 19.962169946805982