Is there a pithy phrase covering accidental "in-band signaling"-style vulnerabilities? Think HTTP request smuggling and packet-in-packet attacks (this is regarding the recent Tarmageddon).

There's "format injection" but the typical cases for that are more like "format string injection" / escaping vulnerabilities.

#infosec

@bascule you can be lazy like OWASP and then everything is an injection

@bascule polyglot smuggling?

5 years ago I made a honeypot TCP server supporting ssh, http, https and Minecraft at the same time, that decides which protocol to use from first few header bytes. So it was kinda reverse polyglot.

I think some HTTP proxies do scan the CONNECT streams for structured data, so they might suffer from "false synchronization" just like frame transmissions in telecommunications.

@bascule
Another example is searching for boundary in MJPEG streams. But "--myboundary" might be inside JPEG data. I'd call that just "false positive".