Hello Matt, Wednesday, May 17, 2006, 4:04:39 PM, you wrote:
MK> Some of the shorter results are: MK> body SARE_OBFU_BACK_NUM m'(?!BACK)\bb\d?a\d?c\d?k\b'i MK> body SARE_OBFU_SAVE_NUM m'(?!save)\bs\d?a\d?v\d?e\b'i MK> body SARE_OBFU_SAVINGS_NUM m'(?!savings)\bs\d?a\d?v\d?i\d?n\d?g\d?s\b'i MK> body SARE_OBFU_NUM_YOUR m'(?!YOUR)\bY\d?O\d?U\d?R\b'i MK> (why the author used m' instead of / is beyond me, as it serves no purpose in MK> these rules.. but a lot of SARE rules have really weird style so I'll chalk it MK> up to weird style.) Many obfu rules need to test for letter substitutions, such as \/ for V. Those rules need a lot of quoting unless you use a construct like m'regex' to eliminate that need. After several passes of "gosh, that's another one that needs quoting," I got into the habit of always using m'regex' for any/all obfu rules. Bob Menschel