On Wednesday, July 21, 2004, 12:27:00 PM, Grant wrote: GGDJ> Yep, usually has to do something with video type stuff.
The good news is that in the last two rounds of updates I've done I saw no more of this guys trash - so I think we've put a hurtin' on him. The bad news is that he is probably the most prolific porn spammer we've seen in a long time and he's likely to come up with something new pretty soon. BUT - I am ready for that. We are running rapid update cycles and I've just about prepared a set of generalized heuristics that will capture what I estimate to be 80+ percent of his possible variations based on the mix of text tokens and URL formats that I've seen so far. The only reason this isn't in place yet is that I want to be sure about the rules because job 1 is: "NO FALSE POSITIVES" and generalized heuristics carry some risks and require some extra care. _M (I believe that this is one or more of the ROKSO spammers, but the content is coming in through as-yet untagged IPs quite often.) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
