From: "Matt Kettler" <[EMAIL PROTECTED]>
Sent: Tuesday, 2008, July 01 01:55


Certainly. Using an older release of SA against recent spam will result in significantly lower detection rates. The code really does matter quite a lot to detection rate. Things like tweaks to the HTML parser that deal with spammer obfuscations and improve accuracy are made in the code, not the rules. If you're using an older SA, you're missing out on these tweaks.

Speaking of which I ran across what might perhaps be a new obfuscation,
today.

http://XXX.YYd5carnelian0&#178;5.YYcom/ZZZZ

Remove the YYs and use random letters for XXX. And ZZZZ was more or less
random stuff. The gibberish, "&#178;", translated into "2".

{^_^}   Joanne

Reply via email to