> * If you don't already know, a few months ago we launched > truncate.gbudb. "Truncate" is an rfc5782 compliant DNSBL that contains > IPs from the dark edge of Message Sniffer's GBUdb system. So far the > comments we've received have been very positive. Be sure to give it a > look when you get a chance and see if it can help you safely block > connections at the edge of your systems. > http://www.gbudb.com/truncate/index.jsp
Very cool. Is rsync access or any other sort of feed available or in the pipeline for this? Thanks! Jonathan On Tuesday, November 9, 2010 4:33pm, "Pete McNeil" <madscient...@armresearch.com> said: > Hello Sniffer Folks, > > This is just a quick note to touch base. It's been a while since we've > had an update, and the list is so quiet! > > * Over the past few days we've finished a major re-tuning of our > rulebase compiler system. The improved rulebase compiler bots are just a > bit smarter and as a result many systems are receiving their updated > rulebase files sooner than ever before. This means capturing more spam > early on more systems and as a result more accurate data in GBUdb for > new bot-nets. A win for everyone. > > * We're growing again: Please welcome our newest SortMonster: Brian (The > Fall Guy). We look forward to Brian's help as we expand our research > capacity and improve our flexibility so that we can rapidly respond to > new spam storms and preemptively defeat those we can predict. > > * If you don't already know, a few months ago we launched > truncate.gbudb. "Truncate" is an rfc5782 compliant DNSBL that contains > IPs from the dark edge of Message Sniffer's GBUdb system. So far the > comments we've received have been very positive. Be sure to give it a > look when you get a chance and see if it can help you safely block > connections at the edge of your systems. > http://www.gbudb.com/truncate/index.jsp > > * Over the next few months we will be upgrading our servers to increase > our capacity and support more sophisticated analysis and research > engines. All of this translates to improved rulebase quality and > response times. Expect this round of upgrades to be finished in the > first half of the new year when we will have some exciting surprises. > > * Quietly in the back of the lab we have been building a sophisticated > proactive false positive prevention system and we've been seeing some > impressive results. Working closely with several of our largest partners > we have developed a system which allows us to identify and eliminate > many false positives before they can occur! This has allowed us to take > our already low false positive rate and reduce it by nearly 30% over the > past few months - especially focusing on low-level false positives that > might otherwise never be reported or detected. As a result we have seen > a measurable reduction in false positive related support traffic across > all of the systems we monitor. We expect further improvements as we > develop more sophisticated tools to help us with our research. > > ===== > > We would love to hear from you! > > Please send us a note from time to time and let us know what we're doing > right and how we can improve. > > Best, > > _M > > -- > Pete McNeil > Chief Scientist > ARM Research Labs, LLC > www.armresearch.com > 866-770-1044 > x7010 > > > ############################################################# > This message is sent to you because you are subscribed to > the mailing list <sniffer@sortmonster.com>. > This list is for discussing Message Sniffer, > Anti-spam, Anti-Malware, and related email topics. > For More information see http://www.armresearch.com > To unsubscribe, E-mail to: <sniffer-...@sortmonster.com> > To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com> > To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com> > Send administrative queries to <sniffer-requ...@sortmonster.com> > > ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. This list is for discussing Message Sniffer, Anti-spam, Anti-Malware, and related email topics. For More information see http://www.armresearch.com To unsubscribe, E-mail to: <sniffer-...@sortmonster.com> To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com> To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com> Send administrative queries to <sniffer-requ...@sortmonster.com>