What to do with this kind of Spam?

michael at optusnet.com.au michael at optusnet.com.au
Tue Jul 15 00:33:16 CEST 2003


John McCain <jmccain at layer3al.com> writes:
[...] 
> My concern has recently become "good word poisoning", where they are including 
> hammy words at the end of the message to defeat bayesian analysis.  My 
> bogofilter performance has suffered a great deal lately due to these bayesian 
> evasion tactics, so I've added Spamassassin.  
> 
> I think we're nearing the end of the phase where Bayesian analysis alone can 
> win the spam battle.  The good thing is that Bayesian methods are forcing 
> spammers to use easily identifiable evasion techniques.  Now it's our turn to 
> adapt.

Sorry, I don't belive that at all. The problem is that Bogofilter
currently discards the information that's needed to deal with this
type of attack. Even just scoring token pairs rather than single tokens
is probably enough to defeat this style of attack.




More information about the Bogofilter mailing list