Instant Messaging Vulnerable To New Smiley Attacks

titus writes "Security researchers Yoann Guillot and Julien Tinnes have found a way to encode malicious code into smileys and provided a proof of concept encoder to automate the process. The researchers said their discovery paves the way for IM malware that would be impossible to detect since the malicious code would be 'indistinguishable from genuine chat messages.' I've tested the proof of concept code which works very well. Time to panic?"

:) and :-)

[superpaladin]

which is safer?

So?

[CopaceticOpus]

That's nothing, I can insert malicious code into the space between [wikipedia.org] those smileys.

Did anyone actually run the code?

[fader]

I'm paranoid, as my idea of a good AFJ would be publishing genuinely malicious code as joke malicious code.