[Spambayes] To think like a spammer...
Mark M. Hoffman
mhoffman@lightlink.com
Sat, 28 Sep 2002 19:25:41 -0700
... that is, if spammers could think.
The spambayes scheme (and others like it that I've seen) can be defeated
easily, with something like this...
<spam>
THIS IS A F A N T A S T I C O P P O R T U N I T Y ! !
W A N T TO MAKE A TON OF M O N E Y ? ? ?
THIS W E B S I T E HAS THE A N S W E R TO ALL YOUR
F I N A N C I N G P R O B L E M S ! ! !
IT COULD NOT BE E A S I E R ! ! ! C L I C K HERE NOW ! ! !
http://blah.blah.com/blah/blah.html
</spam>
Even if you back up and allow single character tokens, you're only going
to recognize a handful of those. A spammer could stuff the end of the
message with ham words to overcome the effect of the single char. tokens.
Do these space-words have to be collapsed to defeat the effect?
Actually, protection against stuffing the end of a spam w/ ham words is
an angle we have to be careful about anyway.
Regards,
--
Mark M. Hoffman
mhoffman@lightlink.com