Closed Bug 328452 Opened 19 years ago Closed 17 years ago

float right letters inside spam breaks up spam keywords

Categories

(Thunderbird :: General, defect)

x86
Linux
defect
Not set
major

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 306468

People

(Reporter: janklopper, Assigned: mscott)

Details

(Whiteboard: closeme 2008-08-21)

User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1 Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1 I keep receiving email messages that use a scheme with random letters inside the spam keywords, that float to the right trough css to obfuscuate the keywords from the spam detection. This is probably the same as the last attachement from: https://bugzilla.mozilla.org/show_bug.cgi?id=306468 Here's the html part: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV>&nbsp;</DIV> <DIV><A = href=3D"http://www.begiersand.com">http://www.begiersand.com</A></DIV> <DIV>&nbsp;</DIV> <DIV>V<span class=3Dtg8> y </span>A<span class=3Dtg8> a </span>L<span = class=3Dtg8> l </span>l<span class=3Dtg8> d </span>U<span class=3Dtg8> n = </span>M<span class=3Dtg8> s </span>&nbsp;<span class=3Dtg8> s = </span>$<span class=3Dtg8> l </span>1<span class=3Dtg8> o </span>,<span = class=3Dtg8> t </span>2<span class=3Dtg8> j </span>1<span class=3Dtg8> o = </span></DIV> <DIV>C<span class=3Dtg8> d </span>I<span class=3Dtg8> a </span>A<span = class=3Dtg8> y </span>L<span class=3Dtg8> b </span>I<span class=3Dtg8> n = </span>S<span class=3Dtg8> c </span>&nbsp;<span class=3Dtg8> o = </span>$<span class=3Dtg8> k </span>3<span class=3Dtg8> x </span>,<span = class=3Dtg8> l </span>3<span class=3Dtg8> b </span>3<span class=3Dtg8> c = </span></DIV> <DIV>V<span class=3Dtg8> j </span>I<span class=3Dtg8> p </span>A<span = class=3Dtg8> g </span>G<span class=3Dtg8> g </span>R<span class=3Dtg8> f = </span>A<span class=3Dtg8> a </span>&nbsp;<span class=3Dtg8> s = </span>$<span class=3Dtg8> c </span>3<span class=3Dtg8> f </span>,<span = class=3Dtg8> p </span>7<span class=3Dtg8> h </span>5<span class=3Dtg8> v = </span></DIV> <STYLE> SPAN.tg8 { FLOAT : RIGHT } </STYLE></BODY></HTML> Reproducible: Always Steps to Reproduce: 1.receive email 2.see it marked as normal mail 3. Expected Results: filter out the float-right letters, and thus detect the letters that site next to each other.
Reporter, does the issue still occur in the latest supported 2.0.0.x / Shredder trunk nightlies? (1.5.0.x is now end-of-life and the latest supported 2.0.0.x is now 2.0.0.16)
Whiteboard: closeme 2008-08-21
RESO INCO per lack of response to previous comment. If you feel this change was made in error, please respond to the bug with your reasons why.
Status: UNCONFIRMED → RESOLVED
Closed: 17 years ago
Resolution: --- → INCOMPLETE
Sorry guys, i can't test this properly. Unless Thunderbird is now doing ocr or something similar this bug will stay a problem, but the type of spam being delivered in my current inbox differs to much to say if it has been solved or not.
Resolution: INCOMPLETE → WORKSFORME
I'm guessing you didn't intend to change the resolution, because WORKSFORME makes absolutely no sense given your comment. The fact that you can't test it doesn't make it WORKSFORME. but if you really think it's a dupe of bug 306468 ...
Resolution: WORKSFORME → INCOMPLETE
Its a Dupe of 306468 comment #9 indeed. Worksforme because spam has changed enough to not trigger this problem anymore, The whole point of fixing the spam detection is to make sure it catches current practices right? On the other hand, I'm not too familiar with the different shades of resolutions here.
the difference here is, the spam you are NOW getting doesn't trigger the behavior, BUT the spam you posted in this bug hasn't been retested and likely is still fails detection. So thunderbird's behavior hasn't changed, ergo the bug should live on. duping
Resolution: INCOMPLETE → DUPLICATE
You need to log in before you can comment on or make changes to this bug.