On Wed, 23 Aug 2023, Andy Smith wrote:
Hello,
On Wed, Aug 23, 2023 at 03:24:22PM +0200, Benny Pedersen wrote:
# test for empty src="" or empty href=""
rawbody __HREF_EMPTY /href=\"\"/
rawbody __SRC_EMPTY /src=\"\"/
I checked this against about 80k of my recent personal emails and it
matched quite a lot of previously not found spam, but did also match
on every auto response from one of my suppliers. It seems after
every customer service interaction they send a "how did we do? fill
in this survey" email from qualtrics.com which contains:
<v:fill type="tile" src="" color="#FFFFFF"/>
It wouldn't be much of a loss, but it's not spam either.
How did they perform individually?
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
USMC Rules of Gunfighting #4: If your shooting stance is good,
you're probably not moving fast enough nor using cover correctly.
-----------------------------------------------------------------------
5 days until Exercise Your Rights day
