I just saw this in the header of a random spam (well blocked, emanating
from Brazil):

Content-Type: text/plain;
        charset="iso-%DIGITS%LCVALUES%DIGITS%DIGITS%LCVALUES"
Content-Transfer-Encoding: quoted-printable

The assumption there is that the spammer's software was supposed to
replace those % variables with random values, and that a random
character format is supposed to confuse a content scanner enough for the
payload to make it through the antispam filters.

The lesson being: don't get hung up on the accuracy of the ISO encoding.

Andrew 8)

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to