Re: 1.4c and inline image spams

Brian Burton <[email protected]> Thu, 04 Jan 2007 17:28:28 -0500
Newsgroups gmane.mail.spam.spamprobe.general
Message-ID <C1C2E9BC.94FA%[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 1/4/07 5:10 PM, "Darxus-5+gNnNaL/BD/[email protected]" <Darxus-5+gNnNaL/BD/[email protected]> wrote:
> On 01/04, Brian Burton wrote:
>> the filter SP even without these changes.)  I didn't want to completely ban
>> With these changes in place I no longer receive inline image spams.
> 
> You've said nothing about your false positive rate.

So far so good. :-)  No false positives yet.  I think false negatives are
still more likely than false positives since this technique still uses SP
for the white list and SP is very forgiving.  Header only scoring is
slightly more prone to false positives than normal scoring but still very
biased against them.

Sooner or later a spam is bound to get through (nobody's perfect) but this
does raise the bar extremely high for the spammer.  I might wind up playing
with the choice of headers I use for scoring a little as time goes on.

All the best,
++Brian



-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.2 (Build 4075)
Charset: US-ASCII

wsBVAwUBRZ1/jzxRyEoJfXIFAQjCDQgAzExVsEKonUcFPgOW8J6wwsxsy+Fxd2Re
eCGRW/twIxA1Wh8NRc6c+qQQqBPWxbpvrTIwZA+0C8q+vMngi58Jqbr54EaWHui5
eYa7Q1gD39nJgiakmgnxlDyJ9JestyvGzNlM0fFxCM+1Xb+jlwJrskTsPXOaUIVE
c0UG3/zvP9esEBVBHbGk5cz746Lt5hVsWWeBpw+xk/nLHxPqZrkvghPwa3QK3ldC
sS6BhJ0HXhsMNeUbTHeHishP2zELzUmgxwtuqMZ6yhC54gwCwh2UDhuKN40I74/H
wDrFm0eFvddeWzs81G9sQYyY4f5gG3oLsFEukTdqqPcgjXnKswo6BA==
=fyWJ
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV