The Patching Friars' AlmanacA calendar of CVE saints

May 8

baseStrikerHoly card for basestriker, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 <base> baseStriker DIVIDE ET FALLE
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Blessed baseStriker, Who Split Links in Two

Patron of anti-phishing filters, forgotten HTML tags, and emails that look harmless by halves.

Life

In May 2018 Avanan found that a single <base> tag in the head of an HTML email was enough to fool Office 365's link scanning. The malicious link was split in two: the base address at the top, the rest in the body. The filter looked at the pieces one by one, found nothing suspicious, and let the whole through. It was a flaw in a cloud service rather than in software fixed under a CVE, which is why he remains blessed.

Prayer

O Blessed baseStriker, who splits evil into two innocent halves, teach our filters to read the whole sentence. Amen.

How to celebrate

Celebrated by remembering that a link is judged by where it goes, not by how it is written.

Half a link scares no one; the whole link should.

Technical record

Disclosed on
May 8 2018
CVE
No CVE: blessed, not yet canonized by MITRE

Sources: avanan.com · web.archive.org

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.