We tried some generalized patterns in Message Sniffer at first, but always found too many false positives in the analysis. Now we just wait for an instance to come by and it's coded in the next update (usually within a couple hours). No false positives for these codings so far... but of course they are specific and it takes time to do this work...

_M

At 04:57 PM 6/18/2003 -0700, you wrote:
I also considered something universal like every combination of letters next to numbers, but there are to many legit messages with codes, even if limited to the subject. It would work if the test were smart enough to measure the ratio of letters to numbers.

Good luck with that.

Dan


On Wednesday, June 18, 2003 15:32, Markus Gufler <[EMAIL PROTECTED]> wrote: > >> ST0P Paying T00 MUCH for 1NSURANCE >> >> Easy to stop, but its silly to make tests for every word in >> the dictionary. Anyone have some already assembled? > >Our latest Alpha-Version of SpamChk has a new test called DigitsInWord. >At the moment it's not very reliable because we have to finish the >implementation of complete MIME-support. Until now this test catches >also certain encoded strings that commonly contain digits and so will >produce false positives. > >Markus > > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. >

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to