New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 24)
· Marcia's (CO8)
· Bill G's (CO12)
· Paul's (AR 5)
· Robin's (AR 2)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· RegChat
· Reviews
· Google Search
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 1194
Comments: 21
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin   Your Favorite ForumsFavForums 

MW Pro admits First Alert doesn't work but wants $$$ anyway
Goto page 1, 2  Next
 
Post new topic   Reply to topic       All -> FavForums -> FirstAlert!
View previous topic :: View next topic  
Author Message
JaXx

Cadet
Cadet



Joined: Oct 20, 2002
Posts: 7
Location: Nepal

PostPosted: Fri Mar 12, 2004 5:23 pm    Post subject: MW Pro admits First Alert doesn't work but wants $$$ anyway
Reply with quote

Mailwasher sent me this reply to my email where they more or less admit that first alert doesn't work, but they have to charge for it b/c its expensive to operate!!! Can you believe that!? They also imply that it will work better in the future, so we should pay for it now. All underlining and bold is mine, for emphasis.

"Thank you, we really appreciate your feedback.
When we first started out planning FirstAlert! we were sure it would really make a difference as spam was pretty heterogeneous, and so we built it. But spam had evolved and keeps evolving to such an extent that it has become impossible to match every spam using this digital fingerprint. We are finding we are having to also use complimentary tools to stop spam.

Given that it's quite expensive to run such a service, we need to charge for it somewhere as it is an ongoing service and there are quite large costs involved, but we will evolve it in to a service which is much more useful.

I do expect we will see a drop off initially in reporting but we'll be adding in functionality soon after to make it much more useful and more inclined for users to report. Another measure we'll use the spam database for is with Bayesian filtering. This will require training your software a little to build up a list of good and bad characteristics, the bad characteristics already being in the database will enable it to be more accurate more quickly.
Back to top
View users profile Send private message
Terryphi

Private
Private



Joined: Dec 15, 2003
Posts: 40
Location: Cymru/Wales UK

PostPosted: Sat Mar 13, 2004 2:33 am    Post subject:
Reply with quote

I'm going to stick with FA and I hope Firetrust do too. It already reliably detects almost 40% of spam received by me and can only get better as the user base increases. This is not the time to withdraw support for the project. Give it a chance to build up a critical mass.

Unfortunately, spammers will not be driven out of business just by the activities of anti-spam activists. Yes, with good filters we can already detect 90% of spam for ourselves but that is not the point. We need a product which will allow Jo(e) Public to effortlessly remove perhaps 75% of spam. With our continued support FA might just do that.
Back to top
View users profile Send private message
JaXx

Cadet
Cadet



Joined: Oct 20, 2002
Posts: 7
Location: Nepal

PostPosted: Sat Mar 13, 2004 12:00 pm    Post subject:
Reply with quote

Well if FA detected 40% of my spam I might continue to support it but it only detects about 10% and that's not worth paying for, at least in my mind.
Back to top
View users profile Send private message
polyglory

Sergeant
Sergeant
Premium Member
Premium Member


Joined: Mar 01, 2003
Posts: 91
Location: Belgium

PostPosted: Sat Mar 13, 2004 3:16 pm    Post subject:
Reply with quote

Terryphi wrote:
I'm going to stick with FA and I hope Firetrust do too. It already reliably detects almost 40% of spam received by me and can only get better as the user base increases. This is not the time to withdraw support for the project. Give it a chance to build up a critical mass.

Unfortunately, spammers will not be driven out of business just by the activities of anti-spam activists. Yes, with good filters we can already detect 90% of spam for ourselves but that is not the point. We need a product which will allow Jo(e) Public to effortlessly remove perhaps 75% of spam. With our continued support FA might just do that.


I have some doubts myself, its a continual battle with tactics changing all the time, I have experienced that quite a few times in a different field.

I shall stay the course and it will improve I have no doubt.

Fair Winds Smile
Back to top
View users profile Send private message
Pancake

Sergeant
Sergeant



Joined: May 15, 2003
Posts: 98
Location: Australia/Kangaroo Trainer

PostPosted: Sat Mar 13, 2004 10:02 pm    Post subject:
Reply with quote

I have taken up an offer by my ISP for Spam filtering for A$5 per year.Only had two in a month.
Back to top
View users profile Send private message
Wayward

Lieutenant
Lieutenant
Premium Member
Premium Member


Joined: Mar 16, 2003
Posts: 299
Location: USA

PostPosted: Sun Mar 14, 2004 12:15 am    Post subject:
Reply with quote

JaXx wrote:
Well if FA detected 40% of my spam I might continue to support it but it only detects about 10% and that's not worth paying for, at least in my mind.

Arrow I'm seeing about 55% flagged by Bayesian, 40% flagged by First Alert!, and 5% flagged by my (very limited) blacklist. This is certainly enough to keep me in the FirstAlert! hunt.

Arrow With the evolving nature of spam ... it is necessary to use multiple options. In addition to the Firetrust stuff running on the desktop, I have Spam Assassin activated via my ISP. The combination is doing a great job.

_________________
Wayward
Back to top
View users profile Send private message
stan_qaz

General
General
Premium Member
Premium Member


Joined: Mar 31, 2003
Posts: 4119
Location: USA

PostPosted: Sun Mar 14, 2004 2:41 am    Post subject:
Reply with quote

My first alert stats are a bit hosed as I have had to write filters to check for spamcop blacklisting and give these priority over first alert to keep from spending time re-reporting spams that spamcop.net already has blacklisted.

I'll keep using FA but I'd be a lot happier if there was some way to see the spamcop.net status even if the spam is tagged by FA.

Spamcop.net reporting is much more effort than reporting to FA and making it simpler/faster would go a long way to getting more users to use the function. The marketing folk could use this in their continuing battle to have more features than the competitors.

Beta comment moved to the corre t forum.


Last edited by stan_qaz on Sun Mar 14, 2004 3:37 pm, edited 1 time in total
Back to top
View users profile Send private message Visit posters website
Sir_Alan

Cadet
Cadet



Joined: Dec 21, 2003
Posts: 3
Location: UK

PostPosted: Sun Mar 14, 2004 2:27 pm    Post subject:
Reply with quote

JaXx wrote:
Well if FA detected 40% of my spam I might continue to support it but it only detects about 10% and that's not worth paying for, at least in my mind.

I agree. Anyway, those reported by FA contain far too many false positives.

I have seen a small increase in detected spam recently, but nothing like enough to justify paying anything for the service. My own filters still catch more spam, using simple rules like [contains 'pharm'] or [contains 'v??gr?'].

Sorry guys, but I'm not paying for something that makes me do most of the work, no matter how much it costs you to run it.

_________________
"Progress just makes bad things happen faster" - Granny Weatherwax
Back to top
View users profile Send private message
stan_qaz

General
General
Premium Member
Premium Member


Joined: Mar 31, 2003
Posts: 4119
Location: USA

PostPosted: Sun Mar 14, 2004 3:50 pm    Post subject:
Reply with quote

The false positive problem in FA is actually two related problems, you find some e-mails marked that you don't believe are spam and some that would have been marked incorrectly are masked by your legit filters and friends list.

Both of these are big confidence busters, if you can't be sure how FA is performing without dropping your friends list and legit filters to check - how can you develop any confidence that it will operate correctly with new mail that you haven't been able to protect with a friend listing or legit filter?

The other key piece of the puzzle that is almost worthless without the indication above is a reporting button for false positives.

I have 95% or more of my incoming mail covered by a legit filter or the friends list so I rarely have a chance to detect a false positive without going to a major clicking effort. This masking of FA results keeps me from building confidence in the system since I rarely see its results when looking at legitimate mail.

Still within these limitations it does a good job of detecting new spams.
Back to top
View users profile Send private message Visit posters website
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3565
Location: Ottawa, Ontario, Canada

PostPosted: Sun Mar 14, 2004 6:26 pm    Post subject:
Reply with quote

I agree with your assessment Stan. While FA! does do a good job but within certain limits, at this point in time I have to say that my other Spam Tools appear to yield more satisfactory results.

Since I can't be certain that FA! adds any value, I doubt that I'll be subscribing.

_________________
I like SPAM ... on my sandwich!
Back to top
View users profile Send private message Send email
AbdLomax

Private
Private



Joined: Mar 10, 2004
Posts: 35
Location: USA

PostPosted: Wed Mar 17, 2004 9:19 pm    Post subject:
Reply with quote

Pancake wrote:
I have taken up an offer by my ISP for Spam filtering for A$5 per year.Only had two in a month.


My domain host implemented spam and virus filtering pretty much as an emergency measure during a recent virus epidemic. The false positive rate on the spam filter was way too high. Fiortunately, the filters just tagged the subject lines with {spam?} and {virus?}. When I complained, they turned off the spam filtering -- which I can turn back on if I want, there is no charge, it is an included service -- and left the virus on, but I *could* turn it off. But I've never seen a false positive with it, so why turn it off?

If you only have two spams in a month, you are quite likely to be missing legitimate mail, or your spam traffic was so low that I wonder why you were concerned in the first place.

The First Alert system, if it gets running and is properly administered, is likely to have very low or non-existent false positives. It doesn't have to be 99% effective to be worth what they are saying they will be charging for it. Even 40% effective, combined with SpamCop filtering, would be worth the fee. First Alert tagged mail could safely be autodeleted *if* the false positive rate is very low.

The theory of the First Alert system should lead to very low false positives. So that there are reports in this thread of significant numbers of false positives is quite worrisome. Perhaps in a drive to tag more spam, the filter people are erring in the direction of more liberal identification. Serious mistake!

First Alert is going to need to drive down the administrative cost by making reporting as easy as possible and by off-loading report validation to the users (obviously, in ways that remain reliable). The users are checking their mail 24/7, when you consider that users are all around the world. Users, if there are enough, will pick up spam immediately; report redundancy from validated users should be enough to get fast yet reliable content tagging, but the final key will also be origin blacklisting. If SpamCop doesn't make IP tagging easy, First Alert could. IP tagging plus strong content filtering would equal highly reliable spam identification. (i.e., if IP is blacklisted and a strong filter says it is spam, it is spam, that a low-false-positive filter would tag a legitimate mail that happened to be coming from a blacklisted server starts to become ... rare indeed.

It has to be fast. If it is fast, fewer spams will get through for users to worry about. To be fast, there has to be a critical mass of users. So Firetrust will get my payment when they are ready to accept it. (I can't sign up, they are not accepting new users.) If it fails, the financial loss will be trivial, compared to how much spam costs.
Back to top
View users profile Send private message Send email
stan_qaz

General
General
Premium Member
Premium Member


Joined: Mar 31, 2003
Posts: 4119
Location: USA

PostPosted: Wed Mar 17, 2004 11:17 pm    Post subject:
Reply with quote

One of my ISPs offers a really nice weighted spam checking system that adds to an e-mails spam score with each test it fails. You can filter based on the spam score. To see a header try searching on my user and declude.
Back to top
View users profile Send private message Visit posters website
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3565
Location: Ottawa, Ontario, Canada

PostPosted: Thu Mar 18, 2004 12:35 am    Post subject:
Reply with quote

AbdLomax wrote:
First Alert is going to need to drive down the administrative cost by making reporting as easy as possible and by off-loading report validation to the users (obviously, in ways that remain reliable). The users are checking their mail 24/7, when you consider that users are all around the world. Users, if there are enough, will pick up spam immediately; report redundancy from validated users should be enough to get fast yet reliable content tagging, but the final key will also be origin blacklisting. If SpamCop doesn't make IP tagging easy, First Alert could. IP tagging plus strong content filtering would equal highly reliable spam identification. (i.e., if IP is blacklisted and a strong filter says it is spam, it is spam, that a low-false-positive filter would tag a legitimate mail that happened to be coming from a blacklisted server starts to become ... rare indeed.

That's an interesting concept - the combination of content and IP blacklist. I agree this could be a significant safeguard against false positives while being rapid for any messages that a) are reported as SPAM by a user and b) come from an already-blacklisted IP address. This has the potential of freeing FireTrust FA! administrators from having to qualify every single report. Rather, they could be concentrating on whether to blacklist IP addresses based on the number of user reports regarding the same IP address.

AbdLomax wrote:
It has to be fast. If it is fast, fewer spams will get through for users to worry about. To be fast, there has to be a critical mass of users. So Firetrust will get my payment when they are ready to accept it. (I can't sign up, they are not accepting new users.) If it fails, the financial loss will be trivial, compared to how much spam costs.

And they'll get mine when they a) publish some sort of statement which gives some sense of strategic direction and b) provide incentives to users which encourage prompt AND accurate reports.

_________________
I like SPAM ... on my sandwich!
Back to top
View users profile Send private message Send email
AbdLomax

Private
Private



Joined: Mar 10, 2004
Posts: 35
Location: USA

PostPosted: Thu Mar 18, 2004 8:16 pm    Post subject:
Reply with quote

Ikeb wrote:
And they'll get mine [payment] when they a) publish some sort of statement which gives some sense of strategic direction and b) provide incentives to users which encourage prompt AND accurate reports.


While I hope they do this, what they are planning to charge is so small that I'm quite willing to pay on the hope that they go in the right direction. That doesn't mean that I'll keep paying, nor that I will ignore what else is happening in the market. But the First Alert concept is the closest thing I've seen so far to what I'd do if it were up to me.

In the end, I think that *many* social ills would find solutions if people were voluntarily organized in true democratic networks of efficient design, rather than depending on electoral democracy on the one hand or the market on the other. The market is powerful, but it is not magic. And electoral democracy is slow as molasses, besides being a largely one-way and very quirky method of communication. The ideas, in a preliminary draft, are at www.beyondpolitics.org. The applications would be mutifarious.
Back to top
View users profile Send private message Send email
stan_qaz

General
General
Premium Member
Premium Member


Joined: Mar 31, 2003
Posts: 4119
Location: USA

PostPosted: Thu Mar 18, 2004 10:13 pm    Post subject:
Reply with quote

Then download and run Vipul's Razor

http://sourceforge.net/projects/razor/


Vipul's Razor is a distributed, collaborative, spam detection and filtering network. The primary focus of the system is to identify and disable an email spam before its injection and processing is complete.

Might even make another good spam tool if it could be easily integrated and the license wasn't impossible to deal with.
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> FirstAlert! All times are GMT - 5 Hours
Goto page 1, 2  Next
Page 1 of 2

 
 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops