email2sms-repro
- year
- stack
- python, fastapi, jupyter
- status
- shipped
A working reproduction of an IEEE S&P 2026 paper on spoofing text messages through email, plus three defenses.[5]
The repo is private while the work is reviewed.
problem
"Lost in Translation: Text Message Spoofing via Email" (IEEE S&P 2026) shows that email-to-SMS gateways can deliver texts that look like they came from someone else. I wanted to see it run, then defend against it.
figure
built
An executable reproduction with a FastAPI demo and notebooks, then three defensive extensions: a spoofed-message detector, a SafeGateway that filters attacks before delivery, and a parser fuzzer that found and patched every parser-vulnerability class it targeted. Live testing sits behind an authorization-only gate; this is defensive research.[5]