Re: [SAtalk] Scoring the Habeas header ...

2004-01-14 Thread Mike Batchelor
--On Wednesday, January 14, 2004 2:48 PM -0500 John Ruttenberg <[EMAIL PROTECTED]> wrote: Mike Batchelor: And as soon as SA is upgraded to recognize when a lawsuit is pending, I might turn the HABEAS_SWE rule back on. Until then, a forged Habeas header is a free pass for spam to get through the

Re: [SAtalk] Scoring the Habeas header ...

2004-01-14 Thread John Ruttenberg
Mike Batchelor: > --On Tuesday, January 13, 2004 11:39 AM -0800 Brian May > <[EMAIL PROTECTED]> wrote: > > > IF spammers use the > > Habeas headers, and the message is in fact spam, they will be sued. > > And as soon as SA is upgraded to recognize when a lawsuit is pending, I > might turn the H

Re: [SAtalk] Scoring the Habeas header ...

2004-01-14 Thread Mike Batchelor
--On Tuesday, January 13, 2004 3:07 PM -0600 Rich Puhek <[EMAIL PROTECTED]> wrote: Be patient. Use additional rules/tools to catch the latest spammers (clue: most come from spam zombie processes). Report the Habeas violators (more $$$ out of the spammers pockets!). Let's keep the Habeas marks as

Re: [SAtalk] Scoring the Habeas header ...

2004-01-14 Thread Mike Batchelor
--On Tuesday, January 13, 2004 11:39 AM -0800 Brian May <[EMAIL PROTECTED]> wrote: IF spammers use the Habeas headers, and the message is in fact spam, they will be sued. And as soon as SA is upgraded to recognize when a lawsuit is pending, I might turn the HABEAS_SWE rule back on. Until then, a

Re: [SAtalk] Scoring the Habeas header ...

2004-01-14 Thread John Wilcock
On Tue, 13 Jan 2004 22:27:18 -0600 (CST), David B Funk wrote: > Also note that Habeas has an RBL listing all reported sources of > forged Habeas-mark messages (the Habeas Infringers List). SA > automatically queries this RBL and will ignore SWE signatures from > those sources. Yep. Of the five spa

Re: [SAtalk] Scoring the Habeas header ...

2004-01-13 Thread David B Funk
On Tue, 13 Jan 2004, Rich Puhek wrote: [snip..] > Be patient. Use additional rules/tools to catch the latest spammers > (clue: most come from spam zombie processes). Report the Habeas > violators (more $$$ out of the spammers pockets!). Let's keep the Habeas > marks as a tempting target for the sp

Re: [SAtalk] Scoring the Habeas header ...

2004-01-13 Thread Rich Puhek
Douglas Kirkland wrote: -BEGIN PGP SIGNED MESSAGE- How is the habeas marks people going to be in forced and make it work without being over run? There are so many spammers in many different countries. I have not seen one message that would have been a FP without habeas mark. They

Re: [SAtalk] Scoring the Habeas header ...

2004-01-13 Thread Douglas Kirkland
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tuesday 13 January 2004 11:39, Brian May wrote: > Habeas is around to make sure email reaches its destination. SA uses > Habeas to push the score down, much like whitelisting. IF spammers use the > Habeas headers, and the message is in fact sp

Re: [SAtalk] Scoring the Habeas header ...

2004-01-13 Thread Kelson Vibber
At 11:26 AM 1/13/2004, Gerry Doris wrote: I'm still completely puzzled why anyone who isn't a spammer would be interested in Habeas. Because spam is about consent, not content, but spam filters can only check content. Hence the problem of false positives. Unless you're intending to offset positi

Re: [SAtalk] Scoring the Habeas header ...

2004-01-13 Thread Morris Jones
On Tue, 13 Jan 2004, Gerry Doris wrote: > Unless you're intending to offset positive scores from spam why bother > with habeas? Actually the intention is to offset the positive score from a false positive. But you certainly have a point. My false positive rate is negligible as it is. I'm throw

Re: [SAtalk] Scoring the Habeas header ...

2004-01-13 Thread Brian May
PROTECTED]> Sent: Tuesday, January 13, 2004 11:26 AM Subject: Re: [SAtalk] Scoring the Habeas header ... > We're all seeing false negatives slip through from a spammer using the > Habeaus header, but I don't think 0 is the right score for the test. > I think it's st

Re: [SAtalk] Scoring the Habeas header ...

2004-01-13 Thread Gerry Doris
> We're all seeing false negatives slip through from a spammer using the > Habeaus header, but I don't think 0 is the right score for the test. > I think it's still a valid negative score. > > Looking at my latest, if I give Habeas a -3.0, the false negative turns > positive. So I'm going to try t