On Sat, 12 Sep 2020, Loren Wilton wrote:

See attached spample.

Is there a boundary missing in that spample? It seems to go from a couple lines of QP text into base64 with no intervening boundary.

It's properly formed. Compare the plaintext part to the HTML part, note that the base64 block is QP'd base64, and note that there's some more QP spam pitch text after the base64 block.

I think the base64 "hidden" text was pasted into the plaintext part by the spammer. Whether intentionally (to impede scanning) or by accident isn't clear, but I think it was probably by accident.

Perhaps the spammer's message composing tool isn't hiding invisible text when it generates the plaintext body part from the HTML part?


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [email protected]                         pgpk -a [email protected]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The premise of gun control in America is that rural conservatives
  must be disarmed because urban leftists are violent and predatory.
                                             -- Grumpy Old Fart @ TSM
-----------------------------------------------------------------------
 5 days until the 233rd anniversary of the signing of the U.S. Constitution

Reply via email to