On Mon, 2009-02-09 at 00:25 +0000, RW wrote: > On Mon, 09 Feb 2009 01:05:35 +0100 Karsten Bräckelmann wrote:
> > Oh, and the text actually is incorrect. Neither has been sent from the > > USA, though it actually are dial-ups. ;) > > The text is lifted from here: > http://www.joewein.de/sw/spam-replica-watches.htm What the... ?! You are spot on, as it seem. My samples are almost *identical* to that educational one. The URI is different, as is the unsubscribe php file name. And the bullet list holds different text. However, the punch line, the first paragraph, the Christmas reference and actually almost *any* text *are* identical. Including upper case. Even the indentation is the same -- the body (without the comment) is indented 4 chars. Exactly what you get when copying from that page. WHY would a spammer copy a 4 year old known sample verbatim? Are these guys really that bored? Thanks for the link, RW. The similarities and reason to do that are just plain... mind boggling. -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
