Hi Bob, Along the same lines, I had the following:
describe MY_RBDY_INVTXTSZ1 MY: Invisible text size rawbody MY_RBDY_INVTXTSZ1 /font\s+.*\bsize=.-\d\D/i score MY_RBDY_INVTXTSZ1 0.5 describe MY_RBDY_INVTXTSZ2 MY: Invisible text size with style rawbody MY_RBDY_INVTXTSZ2 /size=.-\d\D style=.font-size: \dpx;\D/i score MY_RBDY_INVTXTSZ2 0.5 describe MY_RBDY_INVIMGSZE MY: Invisible image size rawbody MY_RBDY_INVIMGSZE /width=.1\D height=.1\D/i score MY_RBDY_INVIMGSZE 0.5 They seem to hit legit opt-in advertisements though. I would be curious to see the results against your corpus if you are inclined and willing to spend the time. Regards, Larry > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:spamassassin-talk- > [EMAIL PROTECTED] On Behalf Of Robert Menschel > Sent: Thursday, January 22, 2004 1:06 AM > To: Charles Gregory > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] SA missed an 'invisible font'? > > Hello Charles, > > Wednesday, January 21, 2004, 8:14:50 AM, you wrote: > > CG> Example HTML below. SA seems to have not recognized the FFFFEE font as > CG> 'invisible', perhaps because it is just one or two points outside the > CG> 'range' permitted by SA? But also note that they have used a ZERO point > CG> size for the font. Can we test for that? I will be..... :-) > > >>font COLOR=FFFFEE style="font-family: arial; font-size: 0pt;"> > > Sounds like a good idea. I built and tested the following: > > rawbody RM_rbh_0ptFont /font-size: 0pt;/i > describe RM_rbh_0ptFont HTML includes zero-point font size; invisible text > score RM_rbh_0ptFont 1.00 > > RM_rbh_0ptFont -- 173s/1h of 91714 corpus (74113s/17601h) 01/21/04 > RM_rbh_0ptFont -- suggested score: 1.865 > > The one ham was a UCE to an email address our company (a retailer) has > set up for such UCEs, where they can offer merchandise for us to > buy/resell. Received just the one, and it looks reasonable in all other > attributes. > > Bob Menschel > > > > > ------------------------------------------------------- > The SF.Net email is sponsored by EclipseCon 2004 > Premiere Conference on Open Tools Development and Integration > See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. > http://www.eclipsecon.org/osdn > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
