New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 24)
· Marcia's (CO8)
· Bill G's (CO12)
· Paul's (AR 5)
· Robin's (AR 2)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· RegChat
· Reviews
· Google Search
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 1170
Comments: 21
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin   Your Favorite ForumsFavForums 

Nonsense spam

 
Post new topic   Reply to topic       Computer Cops Forum Index -> Mailwasher - Troubleshooting / General
View previous topic :: View next topic  
Author Message
Lawrence

Cadet
Cadet



Joined: May 20, 2004
Posts: 2
Location: UK

PostPosted: Sun Jun 06, 2004 12:12 pm    Post subject: Nonsense spam
Reply with quote

Hi.

I regularly get spam that contains nothing but nonsense. Here are the contents of two I had today:

Quote:
dropped nephew parallel summary tie third problem


Quote:
contradistinction todd bicker pleistocene scrounge anatomic
sacrificial candle furze bequest carbohydrate
erratic kemp vengeful artery


Does anyone have any idea why this stuff is being sent?

Thanks.
Back to top
View users profile Send private message
rogerw

Major
Major
Premium Member
Premium Member


Joined: May 11, 2003
Posts: 858
Location: USA

PostPosted: Sun Jun 06, 2004 12:24 pm    Post subject:
Reply with quote

Yes - to try to slip past Bayesian filters (like MW has).

Many big ISPs also use Bayesian filters. The filtering works by assigning good/bad weighting factors to various words that were in the training emails then using the weights to score incoming mail. An email that scores 'bad' is 'probably spam'

Since many spams and good emails have words in common, many words are rather 'neutral'. Words that haven't been introduced into the Bayesian database are weithed to the good side' - but only slightly.

Thus, by adding many words that seem to be randomly taken from the dictionary, the spammers hope to get the score for an email into the probably legitimate range so that it'll not get filtered out.
Back to top
View users profile Send private message
Lawrence

Cadet
Cadet



Joined: May 20, 2004
Posts: 2
Location: UK

PostPosted: Sun Jun 06, 2004 8:18 pm    Post subject:
Reply with quote

Thank you roger.
Back to top
View users profile Send private message
rogerw

Major
Major
Premium Member
Premium Member


Joined: May 11, 2003
Posts: 858
Location: USA

PostPosted: Sun Jun 06, 2004 10:07 pm    Post subject:
Reply with quote

De nada.

The sad part is that the tactic might (given a long time) defeat bayesian filtering by 'polluting' the 'junk' word database with random inncuous words. If you add so many junk emails with random words into the database (training), when those same words appear in 'legitimate' emails, those mails might be scored as 'junk'.

On the plus side, since they're random words, they'll not likely pollute the scoring much - and will not likely appear in your email from Aunt Minne - so Auntie's email probably will get through. The weighting factor for a single word is low - and if the same word doen't occur in other of the 'junk' you train with - it'll likely not have too much of an effect.

In the short run (for indivdual emails attempting to elude Bayesian filters by getting their scoring into the 'not junk' range), the tactic seems to work.
Back to top
View users profile Send private message
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3555
Location: Canada

PostPosted: Mon Jun 07, 2004 12:03 am    Post subject:
Reply with quote

Makes me wonder why SPAMers bother. If someone has gone to the trouble of putting sophisticated filtering methods in place to detect SPAM, what makes them think "if only I can just defeat their filters I'll win them over with my sales message. How can they resist MY promises of manhood enlargements, 1,000,000 bucks, naked nymphomaniacs, the best software/hardware deal ever, etc. etc.?" Rolling Eyes
_________________
I like SPAM ... on my sandwich!
Back to top
View users profile Send private message Send email
AlphaCentauri

Captain
Captain



Joined: Nov 20, 2003
Posts: 302
Location: USA

PostPosted: Tue Jun 08, 2004 12:04 pm    Post subject:
Reply with quote

Because your spam might be filtered by someone other than yourself. Your parents may have had your ISP activate a filter. Or the system administrator on your job might be filtering things they don't think you should be spending time looking at on their dime. SOME doofus is answering the stuff, and it's that kind of intermittent reinforcement that really encourages them.
Back to top
View users profile Send private message
stan_qaz

General
General
Premium Member
Premium Member


Joined: Mar 31, 2003
Posts: 4119
Location: USA

PostPosted: Wed Jun 09, 2004 10:19 am    Post subject:
Reply with quote

One buyer in a million spams is a money making return rate when they can send 10 million spams in a few minutes of their time.
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       Computer Cops Forum Index -> Mailwasher - Troubleshooting / General All times are GMT - 5 Hours
Page 1 of 1

 
 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops