Chr. von Stuckrad wrote:
On Fri, Jul 25, 2003 at 04:41:54PM -0400, Daniel Carrera wrote:
body MY_CONSONANT_4 /[^aeiou]{4}/
describe MY_CONSONANT_4 Body contains 4 consecutive consonants.
score MY_CONSONANT_4 0.15
The pattern might be dangerous for french, chinese,
or polish mails :-
Ian Douglas wrote:
> Daniel Carrera wrote:
> > Like wise we can go on with more consonants:
> >
> > score MY_CONSONANT_4 0.15
> > score MY_CONSONANT_5 0.30
> > score MY_CONSONANT_6 0.60
> > score MY_CONSONANT_7 1.20
> > score MY_CONSONANT_8 2.40
>
> Dumb question from a ru
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Sat, Jul 26, 2003 at 12:37:51PM +0700, Alexander Litvinov wrote:
> > The point is, checking the PGP signature is a good way of finding out if
> > someone is supposed to be writing to you. If there is a recognizable PGP
> > sig, it counts very well
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
> The point is, checking the PGP signature is a good way of finding out if
> someone is supposed to be writing to you. If there is a recognizable PGP
> sig, it counts very well (e.g. -4.5) if it's not recognized it counts a
> little bad (e.g. +1.0)
H
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Sat, Jul 26, 2003 at 11:18:39AM +0700, Alexander Litvinov wrote:
> > Of course, in theory spammers could start including things that look like
> > PGP signatures. But since most people don't use PGP or GnuPG, we don't
> > have to worry about this.
> Spammer WILL start to use real, good signatures. It is not too hard.
We've seen that type of thing already..
Going back to the original message, the sample of target text,
enclosed within an english language email, was:
acxfic z fvddx n th r j eghqyxun hlchd rpk zgrxlkd
bqnkstszzwyoyh h
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
> Of course, in theory spammers could start including things that look like
> PGP signatures. But since most people don't use PGP or GnuPG, we don't
> have to worry about this.
>
> Later of, if spammers start to add fake PGP signatures, we can call an
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
> The same PGP signature problem applies to the multiple-consonant rules
> Daniel Carrera offered. I picked a signed email at random, and
> found: ... 4cons ... 7cons ... 8cons ... 6cons ...
>
> I receive a lot of PGP-signed email ... I'm going to ha
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
> Probably more effective would be to write this as an eval: rule and
> write a function for it. (eval:consonant_count('0', '4'),
How do you write a function for SA?
- --
Daniel Carrera| OpenPGP fingerprint:
Mathematics Dept. | 6643 8C8B 3522
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi Sandy,
Thank you for your comments. I've given it some thought and I think I'm
making progress towards a good rule.
Sample text we want to avoid:
acxfic z fvddx n th r j eghqyxun hlchd rpk zgrxlkd
bqnkstszzwyoyh heljsi
We can try a serie
On Fri, 2003-07-25 at 15:13, Daniel Carrera wrote:
> > > Like wise we can go on with more consonants:
> > >
> > > score MY_CONSONANT_4 0.15
> > > score MY_CONSONANT_5 0.30
> > > score MY_CONSONANT_6 0.60
> > > score MY_CONSONANT_7 1.20
> > > score MY_CONSONANT_8 2.40
> >
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, Jul 25, 2003 at 04:33:27PM -0500, Sandy S wrote:
> Sorry to say I tried something like this already - it hit every we got an
> email order with a credit card number in it, or any string of numbers for
> that matter. Even if you added numbers t
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, Jul 25, 2003 at 06:27:59PM -0300, Raul Dias wrote:
> [...]
> > body MY_CONSONANT_4 /[^aeiou]{4}/
>
> I think you meant something like:
> /[^aeiou\s\d]{4}/
That works better. Yes, that's why I asked for confirmation.
- --
Daniel Carr
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, Jul 25, 2003 at 11:25:17PM +0200, Chr. von Stuckrad wrote:
> > body MY_CONSONANT_4 /[^aeiou]{4}/
> > describe MY_CONSONANT_4 Body contains 4 consecutive consonants.
> > score MY_CONSONANT_4 0.15
>
> The pattern might be dangerous
At 7/25/03 01:41 PM , Daniel Carrera wrote:
Here is a thought: We could test for n consecutive consonants. The more
consecutive consotants, the more likely it is to be spam.
[snip]
Any thoughts on these rules? I guess I'm assuming that you don't get
emails in German.
I also see these sorts of t
AIL PROTECTED]>
Sent: Friday, July 25, 2003 3:41 PM
Subject: Re: [SAtalk] spam funny
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Ahhh... you mean *that* kind of funny...
> When I saw your title I was hoping for a chuckle.
>
> Sorry, I can't think of any rule to
On Fri, Jul 25, 2003 at 04:41:54PM -0400, Daniel Carrera wrote:
> -BEGIN PGP SIGNED MESSAGE-
> body MY_CONSONANT_4 /[^aeiou]{4}/
> describe MY_CONSONANT_4 Body contains 4 consecutive consonants.
> score MY_CONSONANT_4 0.15
The pattern might be dangerous for french, chinese,
or
Hi,
Em Sex, 2003-07-25 às 17:41, Daniel Carrera escreveu:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
[...]
> body MY_CONSONANT_4 /[^aeiou]{4}/
I think you meant something like:
/[^aeiou\s\d]{4}/
[]'s
Raul Dias
---
This SF.Net em
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, Jul 25, 2003 at 01:56:56PM -0700, Ian Douglas wrote:
> > When I saw your title I was hoping for a chuckle.
>
> I have a friend that works at Hormel ...I'm sure I could get all kinds
> of Spam humor from her.
>
> (Hormel makes the meat they c
Why just check the rule Emporium! :)
Here they are, I need to add a few more combo's next week.
# These next six are VERY INTERESTING. I'm very proud of these babies.
# They help tag and find the random characters spammers put in. Works
GREAT
rawbody MY_OBFUZ /z(r|f|k|j|v|x)/i
describe MY_OB
> When I saw your title I was hoping for a chuckle.
I have a friend that works at Hormel ...I'm sure I could get all kinds of Spam
humor from her.
(Hormel makes the meat they call SPAM)
> Like wise we can go on with more consonants:
>
> score MY_CONSONANT_4 0.15
> score MY_CONSONANT_5
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ahhh... you mean *that* kind of funny...
When I saw your title I was hoping for a chuckle.
Sorry, I can't think of any rule to vix those. I'd be interested in one
because I've received some of those too.
Here is a thought: We could test for n cons
22 matches
Mail list logo
