On Sat, 2011-03-19 at 05:47 +0400, Hamad Ali wrote: > > > - John Hardin said: Phishing is his next project, and that even a well > > > trained naive bayes filter might not detect it. let's be on touch on > > > this matter then. Any progress or collaboration is highly welcomed on > > > my side > > > > About the only thing I need from the community are samples, and for spear > > phishing that will be rather difficult.
Yeah, and that again is writing rules. Not bad at all, though one major point stands -- Bayes is likely to be rather useless against *targeted* phishing attacks. Moreover, if an attack really is *targeted*, it won't have too much of a struggle to evade rules also. > Have you considered the public SA ham/spam corpus, ^^^^^^ Uhm, there is no such thing. Definitely not recent-ish. > and monkey.org/~jose phishing corpus? Did we just drop the spear, and downgrade to general phishing? -- char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}