----- Original Message ----- From: "Chris Santerre" <[EMAIL PROTECTED]> To: "'Mark'" <[EMAIL PROTECTED]>; "Gary Funck" <[EMAIL PROTECTED]>; "Spamassassin List" <[EMAIL PROTECTED]> Sent: Monday, August 04, 2003 7:41 PM Subject: RE: [SAtalk] those pesky small v*agra ads
> Wow I take one day off and fall really behind! :) > > 1st, Mark, Can I post your rules to the emporeum? Sure; take whatever you deem useful. :) > 3rd, I think the idea of rendering the html and OCRing it is backwards. I think Gary meant the OCR thing kinda tongue-in-cheek. :) But detecting invisible text might become a problem, for instance, if spammers got wise, ran SA too, and then started lacing their own spam with "invisible" text from their own collected ham. Overall, I am not too worried, though. Just as an in the example of the original poster -- be it less blatant, perhaps -- spammers will inevitably leave some markup footprint to mask their text. And it will be that footprint that we can scan for. In fact, I predict, should spammers persist in techniques to hide text, that soon enough we will reach a turning point to our advantage, in that initially it may seem clever to hide text, but the footprint they leave doing so will be the clear giveaway. Like using n0n0 words like "y0ung" and such: seems smart on the surface, but in reality is a spammer footprint that sticks out like a sore thumb, and almost makes all other tests redundant. - Mark ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
