At 10:48 AM -0700 06/17/2013, John Hardin wrote:
On Mon, 17 Jun 2013, Amir 'CG' Caspi wrote:
I am now seeing STYLE_GIBBERISH hitting on a lot of spam in the
past day or so, since the new rules hit the distribution. So far,
all TPs, no FPs.
Yay!
But, I found one today that should have hit (at least on cursory
inspection) and did not. See http://pastebin.com/Zswg77Ds
There is definitely style gibberish there, but it didn't hit that
rule. (Yes, it also hit bayes00, I know... don't bring that up. =P)
Any idea why it failed to hit, and does this need another rule revision?
You can also see the HTML comment spam here, and in my previous
example, which could be a basis for an HTML_COMMENT_GIBBERISH rule,
per the earlier emails.
Cheers.
--- Amir
