Hi, On Mon, Jun 17, 2013 at 1:48 PM, John Hardin <jhar...@impsec.org> wrote: > On Mon, 17 Jun 2013, Amir 'CG' Caspi wrote: > >> At 7:20 PM -0700 06/15/2013, John Hardin wrote: >>> >>> I took a closer look at this and it seems they're working around trivial >>> gibberish detection by putting a valid CSS property at the very beginning of >>> the style tag. >>> >>> Revising the rules... >> >> I am now seeing STYLE_GIBBERISH hitting on a lot of spam in the past day >> or so, since the new rules hit the distribution. So far, all TPs, no FPs. > > Yay!
I've also noticed the latest iteration hitting now quite a bit, but also found an FP from groupon: http://pastebin.com/qwdtSqJd Thanks, Alex
