On Wed, 25 Mar 2009, LuKreme wrote:
On 25-Mar-2009, at 19:29, John Hardin wrote:
If 3.2.x does indeed implement multiline rawbody matches, then we'll be
able to have a robust rule for this - e.g. an HTML email with a table that
has more than 30 columns and more than 5 rows. That will be difficult to
obfuscate.
More than 30 columns is enough, it doesn't need to worry about the number of
rows I wouldn't think. Especially since it would be trivial to make each
'row' a separate table, breaking the matching.
No, that wouldn't break it.
More breaking would be a series of single-column or single-letter tables
side-by-side. I'll play around with that and see whay I can come up with.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
A well educated Electorate, being necessary to the liberty of a
free State, the Right of the People to Keep and Read Books,
shall not be infringed.
-----------------------------------------------------------------------
64 days since Obama's inauguration and still no unicorn!
