Re: *****SPAM***** Subliminal html in spam?

[Shane Williams <shanew () shanew net>]

-----BEGIN PGP SIGNED MESSAGE-----

On Thu, 4 Apr 2002, John Sage wrote:

> What this is, is text embedded within html comment tags that are
> embedded within the body text of the spam itself.

I would strongly suspect this is an attempt by a spammer to avoid
detection by filters.  By splitting "spammy" words in half with HTML
comments, I suspect many filters would completely miss all the obvious
signs (like "STRONG BUY" and all the YELLING).

- -- 
Public key #7BBC68D9 at            |                 Shane Williams
http://pgp.mit.edu/                |                               
=----------------------------------+-------------------------------
All syllogisms contain three lines |              shanew () shanew net
Therefore this is not a syllogism  |   www.gslis.utexas.edu/~shanew


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBPK+igWa83yV7vGjZAQExygQAl7Mbh7BlPbcjyyE1Rx3E1gM9x/9d6w2u
GScrTs8rR88Xc8at/oghLtVZPauNU00Gu2/kpN9Zxqn1XVWZ9YTJm/zAxHs9DKV0
bR1nY4tyS/FDe14h9UYIvCBapj5Kc8y9Mk9hVTSm8Vx8lvOjuWlAL1Uys06q539i
KjdASoeMXQs=
=9LFa
-----END PGP SIGNATURE-----


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users