Re: Your message to the Irish Online Help Desk Re: Obfuscation Question

2009-08-28 Thread Michelle Konzack
Hi Karsten, Am 2009-08-28 12:27:38, schrieb Karsten Bräckelmann: > Which one do you refer to as "original"? The Autoresponder I think, because your reply on 2009-08-28 03:34:23 was the first I have gotten, so I assume, the message you have replyed to was the OP. > The original post is not spa

Re: Your message to the Irish Online Help Desk Re: Obfuscation Question

2009-08-28 Thread Karsten Bräckelmann
On Fri, 2009-08-28 at 12:10 +0200, Michelle Konzack wrote: > Hallo Karsten, > > is your spamassassin in holliday? > > Here, spamassassin has catched the original > message and I have never seen it.. Which one do you refer to as "original"? The original post is not spam, and should not be caught

Re: Your message to the Irish Online Help Desk Re: Obfuscation Question

2009-08-28 Thread Michelle Konzack
Hallo Karsten, is your spamassassin in holliday? Here, spamassassin has catched the original message and I have never seen it.. Thanks, Greetings and nice Day/Evening Michelle Konzack Systemadministrator Tamay Dogan Network Debian GNU/Linux Consultant -- Linux-User #280138 with

Re: Obfuscation Question

2009-08-27 Thread Matt Kettler
Irish Online Help Desk wrote: > > When I send a test message for my broadcast email I am receiving “0.6 > HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation” in > the spam score. It is a pretty basic email message with a few > hyperlinks and a numbered list. Can you explain what may

Re: Your message to the Irish Online Help Desk Re: Obfuscation Question

2009-08-27 Thread Karsten Bräckelmann
See, this is one of the reasons why I prefer NOT to moderate through posts by non-subscribers. I am *seriously* trying hard not to use any words that are inappropriate for a public list. Funnily enough, I can't even begin to explain how I feel about trying to help you and getting that bloody reply

Re: Obfuscation Question

2009-08-27 Thread Karsten Bräckelmann
Not subscribed. You are missing the on-list replies. Well, if any useful, given that post... On Wed, 2009-08-26 at 11:30 -0400, Irish Online Help Desk wrote: > When I send a test message for my broadcast email I am receiving “0.6 > HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation”

Re: Obfuscation Question

2009-08-27 Thread Benny Pedersen
On Wed 26 Aug 2009 05:30:31 PM CEST, Irish Online Help Desk wrote When I send a test message for my broadcast email I am receiving "0.6 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation" in the spam score. It is a pretty basic email message with a few hyperlinks and a numbered li

Re: obfuscation

2008-07-04 Thread mouss
Arvid Ephraim Picciani wrote: Heya, wondering if somone got a rule for those. For me it's too low volume to care. see attached mail. The sender isn't on any BL yet (might be in a few hours) , but the URL is already on uribl.com. SA doesn't detect the "obfuscation" unfortunatly. The bayes poiso

Re: Obfuscation

2005-03-02 Thread Martin Hepworth
All nice obsfu generator at.. http://sandgnat.com/cmos/cmos.jsp -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Scott A Crosby wrote: On Mon, 28 Feb 2005 15:34:13 +, [EMAIL PROTECTED] (Justin Mason) writes: A paper at the spam conference suggested using a

Re: Obfuscation

2005-03-02 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Scott A Crosby writes: > On Mon, 28 Feb 2005 15:34:13 +, [EMAIL PROTECTED] (Justin Mason) writes: > > > A paper at the spam conference suggested using an Edit Distance algorithm > > with very good results; the idea being, the edit distance from "

Re: Obfuscation

2005-03-02 Thread Scott A Crosby
On Mon, 28 Feb 2005 15:34:13 +, [EMAIL PROTECTED] (Justin Mason) writes: > A paper at the spam conference suggested using an Edit Distance algorithm > with very good results; the idea being, the edit distance from "cialis" to > "C 1 a l | s" isn't as far as it is to "specialized" or so on. > >

Re: Obfuscation (was: Millions and Billions)

2005-02-28 Thread Kenneth Porter
--On Sunday, February 27, 2005 7:46 PM -0800 Loren Wilton <[EMAIL PROTECTED]> wrote: He has a point. A complicated regex is complicated, and that can mean slow. It also by definition means "incomprehensible to humans", and so has to be generated by a tool, and then not touched or looked at. Than

Re: Obfuscation (was: Millions and Billions)

2005-02-28 Thread Dawn Keenan
Chris Santerre wrote: > I remember that paper. I was impressed and sceptical at the same time. I > could see it FPing a lot. One person in the crowd brought up Niagra vs. the > V-drug word :) > > Cialis vs. Dial-Lisa > ect.. That was MailFrontier, using the term lexigraphical distancing rat

RE: Obfuscation (was: Millions and Billions)

2005-02-28 Thread Chris Santerre
>-Original Message- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] >Sent: Monday, February 28, 2005 10:34 AM >To: Loren Wilton >Cc: users@spamassassin.apache.org >Subject: Re: Obfuscation (was: Millions and Billions) > > >-BEGIN PGP SIGNED MESSAGE-

Re: Obfuscation (was: Millions and Billions)

2005-02-28 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Loren Wilton writes: > Since a tool can generate the matching pattern and convert it to a re, it > seems that a tool could in theory generate a matching pattern and convert it > to something else that might be either more comprehensible or more > effi

Re: Obfuscation (was: Millions and Billions)

2005-02-28 Thread Robert Menschel
Hello Kenneth, Sunday, February 27, 2005, 7:35:18 AM, you wrote: KP> --On Thursday, February 24, 2005 6:07 PM -0500 Phil Barnett KP> <[EMAIL PROTECTED]> wrote: >> i or l = [|ííiil1] >> a = [EMAIL PROTECTED] >> e = [eé3] >> o = [o0] KP> It seems like this is getting overly-complicated. Are there

Re: Obfuscation (was: Millions and Billions)

2005-02-28 Thread Loren Wilton
> > I just question whether regex's are the right "complicated solution". > > > > How does Google or one of the dictionary sites guess the correct spelling > > for a misspelled word? > > Great, why don't you go see if google can guess the correct spelling for > > c l @ L i @ s He has a point. A c

Re: Obfuscation (was: Millions and Billions)

2005-02-27 Thread Phil Barnett
On Sunday 27 February 2005 06:31 pm, Kenneth Porter wrote: > --On Sunday, February 27, 2005 11:48 AM -0500 Phil Barnett <[EMAIL PROTECTED]> > > wrote: > > All you have requested here is for someone else to do the complicated > > stuff and make it easy for you. Someone has to get the code as comple

Re: Obfuscation (was: Millions and Billions)

2005-02-27 Thread Kenneth Porter
--On Sunday, February 27, 2005 11:48 AM -0500 Phil Barnett <[EMAIL PROTECTED]> wrote: All you have requested here is for someone else to do the complicated stuff and make it easy for you. Someone has to get the code as complex as it needs to be. If not you, then the guy that makes the library y

Re: Obfuscation (was: Millions and Billions)

2005-02-27 Thread Phil Barnett
On Sunday 27 February 2005 10:35 am, Kenneth Porter wrote: > --On Thursday, February 24, 2005 6:07 PM -0500 Phil Barnett > > <[EMAIL PROTECTED]> wrote: > > i or l = [|ííiil1] > > > > a = [EMAIL PROTECTED] > > > > e = [eé3] > > > > o = [o0] > > It seems like this is getting overly-complicated. Are t

Re: Obfuscation

2005-02-27 Thread Marc Perkel
I had a trick I was using in Exim that worked pretty well and cound be recoded in perl. First - I had a list of words spelled correctly that spammers often deliberately misspell. What I did was take the subject and the first 200 characters of the body. Then I removed all the words matching the