DCC should help in this case, right? Its model is to calculate a fuzzy
checksum.
I suppose when the next version of SA which works with DCC is out, you can
expect to see a better result.

Weidong

----- Original Message -----
From: "Fred Inklaar" <[EMAIL PROTECTED]>
To: "SpamAssassin" <[EMAIL PROTECTED]>
Sent: Thursday, June 13, 2002 10:54 AM
Subject: Re: [SAtalk] Trick to bypass Razor


> op 13-06-2002 16:42 schreef Bart Schaefer ([EMAIL PROTECTED]):
>
> > On Thu, 13 Jun 2002, Fred Inklaar wrote:
> >
> >> In this case however, a single line of garbage is added to to the
message,
> >> making Razor generating a different CRC for each one, in effect
escaping
> >> Razor. And there's not SA rule yet to catch this unique id in the
> >> messagebody.
> >
> > You'll excuse me for saying so, but ... so what?  The messages got a
score
> > of 5.9 and so were properly tagged as spam by SA, so it obviously needed
> > neither Razor nor a rule for that unique ID to work properly.
>
> Indeed, this message does, but it wouldn't surprise me at all to see this
> technique applied more widely. And then we will see spam that does manage
to
> stay under the 5.0 treshold.
>
>
> _______________________________________________________________
>
> Don't miss the 2002 Sprint PCS Application Developer's Conference
> August 25-28 in Las Vegas -
http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink
>
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas - 
http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to