full-disclosure - Spam with PGP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20031007213914.GA14113212@ohm.arago.de>
From: full-disclosure at arago.de (Thomas Binder)
Subject: Spam with PGP

Hi!

On Tue, Oct 07, 2003 at 11:24:36AM -0400, Brian Dinello wrote:
> My personal favorite is the 'message embedded in an html table'
> trick where every letter in the email is in its own cell in a
> table like this:
> 
> [snip]
> 
> This defeats almost every type of spam blocking app made today.

But also looks quite clumsy in some mail clients. And with a small
filter called from (e.g.) a procmail recipe it would be possible
to replace text/html parts with a <pre>...</pre> version of a lynx
/ links -dump of the original code before passing it to the spam
analyzer. Afterwards, the original code {sh,c}ould be restored.

Of course, such a solution would be quite expensive and therefore
most probably not be usable at high volume sites.

Ciao

Thomas

-- 
A handful of patience is worth more than a bushel of brains.