[SAtalk] Spammers sneaking lower Bayes scores

Wed, 25 Jun 2003 16:12:34 -0700

Note the random words within the <font> tags at the end of the spam. I think they lowered its Bayes score, which dropped it below my threshold overall. That, and the lack of any other text aside from the links...

Is this tactic likely to succeed for them, rendering our Bayesian classifiers ineffective? What do you think?

---------- Forwarded Message ----------
Date: Wednesday, June 25, 2003 09:11:40 +0000
From: Octavia Hallee <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: The most amazing group action ever

Return-Path: <[EMAIL PROTECTED]>
X-Sieve: cmu-sieve 1.3
X-Mail-From: [EMAIL PROTECTED]
X-Relay: [203.2.119.22]
Return-Path: <[EMAIL PROTECTED]>
Received: from eternalserver.com ([203.2.119.22])
        by u1.bv.to (8.12.2/8.12.2/20030506a) with SMTP id h5PKlkZK028732
        for <[EMAIL PROTECTED]>; Wed, 25 Jun 2003 13:47:46 -0700 (PDT)
Received: (qmail 30393 invoked by uid 501); 25 Jun 2003 09:11:40 -0000
Delivered-To: [EMAIL PROTECTED]
Date: 25 Jun 2003 09:11:40 -0000
Message-ID: <[EMAIL PROTECTED]>
From: "Octavia Hallee" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: The most amazing group action ever
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_1056574067-5815-191"
X-Spam-Status: No, hits=2.3 req=3.1,
tests=BAYES_40,HTML_70_80,HTML_FONT_COLOR_GRAY,HTML_IMAGE_ONLY_04,HTML_MESS
AGE,HTML_WEB_BUGS,MIME_HTML_ONLY X-Spam-Level: ** (2.3)
X-Scanned-By: MIMEDefang 2.33 (www . roaringpenguin . com / mimedefang)

This is a multi-part message in MIME format...

------------=_1056574067-5815-191
Content-Type:  text/html;
       charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

<body
background="http://eternalserver.com/o-corner-graphic/images/bg.jpg?ea=o-co
rner-graphic&eb=mike&ec=batch.com" topmargin="0"> <div
align="center"><table width="748" border="0"><tr><td><div align="center">
<a
href="http://eternalserver.com/o-corner-graphic/groupfun.html?aa=o-corner-g
raphic&ab=mike&ac=batch.com"> <img
src="http://eternalserver.com/o-corner-graphic/images/ocorner.jpg?ba=o-corn
er-graphic&bb=mike&bc=batch.com" border="0"></a> <br><br><br><br>
<a
href="http://www.eternalserver.com/take-me-off/index.html?ca=o-corner-graph
ic&cb=mike&cc=batch.com"> <img
src="http://eternalserver.com/o-corner-graphic/images/nomore.gif?da=o-corne
r-graphic&db=mike&dc=batch.com" border="0"></a> </div></td></tr></table>
<br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br
<br><br><br><br><br> <font size="1" color="#333333">studs hairiness 
miltonic waldo pseudoinstruction  RzneXzvxrRzneXongpu.pbzRzneX
monocotyledon conceals rickshaws raising lutheranizers  gels modulating
cautions bowed verbally  storeyed tormenting dairy pruners height </font>
</div></body>

------------=_1056574067-5815-191--

---------- End Forwarded Message ----------



---
"The avalanche has already begun. It is too late for the pebbles to vote."
-- Kosh


-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to