RFC-2047 [was: New spam trick]

[David Relson]

At 09:05 AM 7/21/03, Boris 'pi' Piwinger wrote:
>David Relson wrote:
>
> >>In my logfile I observe that many spammers use broken MIME
> >>encoding in the subject. An encoded word MUST have
> >>whitespace to be separated from anything else. This is missing.
> >
> > Can you post some samples?
>
>Subject: Just give=?ISO-8859-1?B?IGl0IHRv?= me!
>
>Subject: I found your a=?ISO-8859-1?b?ZGRpZQ==?=
>
>Subject: =?iso-8859-1?b?TXkgc2g=?=ady past
>
>Subject: You blocke=?ISO-8859-1?b?ZCBteSBJQ1E=?=
>
>Subject: Tickets arriv=?ISO-8859-1?b?ZWQ=?=
>
>Subject: Buy You=?ISO-8859-1?b?ciBQcmVzY3JpcHRp?=on
>Med=?ISO-8859-1?b?cyBPbmw=?=ine.
>
>pi

Ah!!! That stuff.  I, too, have noticed occasional messages like those.

Looks like bogofilter doesn't know about RFC-2047.  I guess it's time to 
add RFC-2047 compliance to the TODO list.