Hi all, I'm seeing an increase in Google Reader and yahoo groups/personals/profile spam. Here's an example of the Google Reader spam:
http://pastebin.com/m1021fc5f Any ideas on how to catch this one? For the Yahoo spam (with links to yahoo sites ending in '/1', I've created these: uri LOC_YAHOO1 m{http://groups\.yahoo\.com\/}i score LOC_YAHOO1 0 1.5 0 1.5 describe LOC_YAHOO1 Contains groups.yahoo.com uri uri LOC_YAHOO2 m{http://profile\.yahoo\.com\/}i score LOC_YAHOO2 0 1.5 0 1.5 describe LOC_YAHOO2 Raw body contains profile.yahoo uri LOC_YAHOO3 m{http://personals\.yahoo\.com\/}i score LOC_YAHOO3 0 1.5 0 1.5 describe LOC_YAHOO3 Raw body contains personals.yahoo They're somewhat paired down because I'm not very good at pattern matching, so thought someone could improve on this? Thanks, Alex
