Hello Matt,

Wednesday, May 17, 2006, 4:04:39 PM, you wrote:

MK> Some of the shorter results are:

MK> body      SARE_OBFU_BACK_NUM       m'(?!BACK)\bb\d?a\d?c\d?k\b'i
MK> body      SARE_OBFU_SAVE_NUM       m'(?!save)\bs\d?a\d?v\d?e\b'i
MK> body      SARE_OBFU_SAVINGS_NUM    
m'(?!savings)\bs\d?a\d?v\d?i\d?n\d?g\d?s\b'i
MK> body      SARE_OBFU_NUM_YOUR       m'(?!YOUR)\bY\d?O\d?U\d?R\b'i

MK> (why the author used m' instead of / is beyond me, as it serves no purpose 
in
MK> these rules..  but a lot of SARE rules have really weird style so I'll 
chalk it
MK> up to weird style.)

Many obfu rules need to test for letter substitutions, such as \/ for
V.  Those rules need a lot of quoting unless you use a construct like
m'regex' to eliminate that need.  After several passes of "gosh,
that's another one that needs quoting," I got into the habit of always
using m'regex' for any/all obfu rules.

Bob Menschel



Reply via email to