Re: 1.4c and inline image spams
Brian Burton <[email protected]> Thu, 04 Jan 2007 17:28:28 -0500
| Newsgroups | gmane.mail.spam.spamprobe.general |
|---|---|
| Message-ID | <C1C2E9BC.94FA%[email protected]> |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 1/4/07 5:10 PM, "Darxus-5+gNnNaL/BD/[email protected]" <Darxus-5+gNnNaL/BD/[email protected]> wrote: > On 01/04, Brian Burton wrote: >> the filter SP even without these changes.) I didn't want to completely ban >> With these changes in place I no longer receive inline image spams. > > You've said nothing about your false positive rate. So far so good. :-) No false positives yet. I think false negatives are still more likely than false positives since this technique still uses SP for the white list and SP is very forgiving. Header only scoring is slightly more prone to false positives than normal scoring but still very biased against them. Sooner or later a spam is bound to get through (nobody's perfect) but this does raise the bar extremely high for the spammer. I might wind up playing with the choice of headers I use for scoring a little as time goes on. All the best, ++Brian -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.2 (Build 4075) Charset: US-ASCII wsBVAwUBRZ1/jzxRyEoJfXIFAQjCDQgAzExVsEKonUcFPgOW8J6wwsxsy+Fxd2Re eCGRW/twIxA1Wh8NRc6c+qQQqBPWxbpvrTIwZA+0C8q+vMngi58Jqbr54EaWHui5 eYa7Q1gD39nJgiakmgnxlDyJ9JestyvGzNlM0fFxCM+1Xb+jlwJrskTsPXOaUIVE c0UG3/zvP9esEBVBHbGk5cz746Lt5hVsWWeBpw+xk/nLHxPqZrkvghPwa3QK3ldC sS6BhJ0HXhsMNeUbTHeHishP2zELzUmgxwtuqMZ6yhC54gwCwh2UDhuKN40I74/H wDrFm0eFvddeWzs81G9sQYyY4f5gG3oLsFEukTdqqPcgjXnKswo6BA== =fyWJ -----END PGP SIGNATURE----- ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV