Full Disclosure mailing list archives

Re: Spam with PGP


From: Thomas Binder <full-disclosure () arago de>
Date: Tue, 7 Oct 2003 23:39:14 +0200

Hi!

On Tue, Oct 07, 2003 at 11:24:36AM -0400, Brian Dinello wrote:
My personal favorite is the 'message embedded in an html table'
trick where every letter in the email is in its own cell in a
table like this:

[snip]

This defeats almost every type of spam blocking app made today.

But also looks quite clumsy in some mail clients. And with a small
filter called from (e.g.) a procmail recipe it would be possible
to replace text/html parts with a <pre>...</pre> version of a lynx
/ links -dump of the original code before passing it to the spam
analyzer. Afterwards, the original code {sh,c}ould be restored.

Of course, such a solution would be quite expensive and therefore
most probably not be usable at high volume sites.


Ciao

Thomas


-- 
A handful of patience is worth more than a bushel of brains.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: