Re: Uncompressing gif Files that May or May Not be gif's
On Mon, Feb 12, 2007 at 10:44:54AM -0600, Martin McCormick wrote:
> Thank you. I had forgotten about that great utility. The bad
> news is that the .gif files in the virus messages are either
> genuine gifs and the infection mechanism is hidden somewhere else
> or the gif file looks so authentic that it passes all the tests.
> I tried it on a couple of spams whose text is a bunch of
> disconnected words and sentences for example:
[snipped quoted spam]
> To me, this is interesting but the goal is to
> mechanically detect those darn things and shunt them in to the
> spam folder as they frequently get by bogofilter.
The goal is for the debian list filters to actually work. You make this
more difficult by QUOTING SPAM. Please don't.
Doug.
Reply to: