[SC-Help] Re: New Obfuscation Tricks

[Mike Easter]

Does it Matter? wrote:
> Quote:
>
> "That error is due to there being a missing empty line space between
> the  headers and the body.  "
>
> Thanks, Mike, but I already understood that much. I've already added
> the space with previous messages.

You did a lot more than that, and your prior question was focused more on
structure


Does it Matter? wrote previously:
> The spammer uses tricks like putting 3D tag in front links, using
> numerous "garbage" links (that lead nowhere or have nothing to do
> with the the spammer's true spamvertised site), or fooling the
> scanner by breaking up words and phrases like so:


Does it Matter? wrote now
> That 's why I directly copied and
> posted the original header/source message "as is" (without
> modification). I.E., to make a comparison between the original source
> .html and the "cleaner" version of the text.

The 2nd tracker's spambody doesn't resemble that of the first much at
all, it is significantly changed and abbreviated.

> My original question concerned how to deal with the second part of
> your reply:


<Mike's cite & spamcop verbose>
>  Finding links in message body
>> Recurse multipart:
>>    Parsing HTML part
>> Reducing redundant links for jive.spinpage.com
>> Too many links
>>
>> which is a completely different problem.

Does it Matter? wrote now
> The answer to above is what I'm most interested in.
>
> Are there any known solutions or ideas on the horizon to handle this
> (by that, I mean on the server side of the issue /w Spamcop.net)?

'Too many links' has been discussed [in the discussion groups, not in
.spam, which isn't a discussion group] to death - here's a googleup web
of the phrase appearing in the pipermail reflection of spamcop.net

"Too many links" site:spamcop.net  http://snipurl.com/95wq -- That's
about 175 hits to look over.

Currently the spammer strategy of many links wins because the spamcop
counterstrategies have encountered problems.  Sometimes too many links is
because there are a lot of innocent bystanders;  sometimes too many links
is because there are many subdomains and the strategy of going after the
nameservice proved to be flawed.

This dialog business will work much better conversationally if you trim,
contextualize, attribute, and cite according to recommended guidelines
such as these

news.newusers.questions - Quoting Style in Newsgroup Postings -
http://members.fortunecity.com/nnqweb/nquote.html

Q2: How should I use the quoted text and arrange it with my own text?
Q6: What's this about attributing properly?
Q7: Why shouldn't I put my comments above the quoted material?



-- 
Mike Easter
kibitzer, not SC admin