For 2 emails to randomly have the same SHA1 hash is hugely improbable (It's late but I think it's 1 in 2^160 * 2*160, or 1 in 2^320... That's 1 in 2.1 x 10^96 in scientific notation.. big number..)
However I do know that there were some hash calculation bugs in some versions of razor2 causing false dupes.. I don't think razor1 would be subject to the same bug, but perhaps a similar one exists in the version of razor1 you are using?
Seems very strange to me that you got such a dupe match in razor1 for something with such erratically changing output. Possible, but I think the odds of being struck by lightning on two different days of the same week and surviving both are much better.
At 05:46 PM 1/30/2003 -0800, William R Ward wrote:
Oh! I thought Razor was some kind of "realtime black list" type
thing, based on the IP address of the sender and such. I'm surprised
to hear that it looks at the body. (I don't use Razor directly; it's
only relevant to me because I use SpamAssassin.)
The body of my message was pretty unique - it's a script I wrote and
the output of the script is very specific to the task. Here's a
sample. I changed the numbers to protect my privacy.
Maybe it's the string "profit!" that's doing it?
--begin quote--
ORACLE CORP
Last trade: $XXX.XX (01/30/2003 12:57 PST)
ESPP Period: 10/01/2002 - 03/31/2003 (121 days elapsed, 59 days to go)
Change in price since start: $XXX.XX ($XXX.XX per day)
At this rate, the ending price will be: $XXX.XX
XXX shares purchased at $XXX.XXX ($XXX.XX) are currently worth $XXX.XX
If sold today, profit would be $XXX.XX
If the ending price is as predicted:
Buy price: $XXX.XX (XXX.XX shares).
Sell immediately at $XXX.XX for $XXX.XX profit!
If the stock stays the same as it is right now:
Buy price: $XXX.XX (XXX.XX shares).
Sell immediately at $XXX.XX for $XXX.XX profit!
If the stock ends at or below $XXX.XX,
profit from immediate sale will be $XXX.XX.
--end quote--
Matt Kettler writes:
>Razor does not store, or operate based on what your email address is or who
>your ISP is.
>
>Razor does NOT have your email address, nor the servers of your ISP, in
>some kind of blacklist.
>
>Razor operates based on comparing hash results of the message body, it
>doesn't even examine any of the headers at all. So things like "from"
>aren't even a part of it's considerations. This is true of both razor1 and
>razor2, the differences are in the details of how the hash is generated and
>how reports are handled.
>
>Unless you send the same message to someone else, it will not be listed by
>razor just because one of your other messages match.
>
>In this case it looks like someone mistakenly reported the cron-job output
>of a common default OS install. Since it's cron output, the body of the
>message they got is quite possibly the same as the one you have.
>
>
>At 04:17 PM 1/30/2003 -0800, William R Ward wrote:
>>My concern is that when I send mail to someone else, their spam filter
>>might block it...
>>
>>Michael Loftis writes:
>> >Add your sending address to the whitelist_from.
>> >
>> >Razor just make a 'hash' of the message which is anonymous esp. in that you
>> >can get collisions like this one. Think of it as a really bad photocopy or
>> >one of those government documents with all the really important stuff
>> >blacked out. It's useful in that you can tell that you recieved basically
>> >this message but not exactly the contents of it.
>> >
>> >Check out the SpamAssassin dox for more info, but the problem isn't with
>> >Razor, you really need to add a whitelist_from for your sendint address
>> >
>> >--On Thursday, January 30, 2003 3:10 PM -0800 William R Ward
>> ><[EMAIL PROTECTED]> wrote:
>> >
>> >>
>> >> I have a script I run from a cron job that emails myself with my
>> >> employer's stock quote at the end of each trading day. I was shocked
>> >> to find that today's e-mail is flagged by SpamAssassin as spam! This
>> >> is new - it has never been flagged as spam before.
>> >>
>> >> The reason I'm posting to razor-users is because the main reason it
>> >> was labeled as spam was the RAZOR_CHECK rule. How can I prevent this
>> >> in the future?
>> >>
>> >> I have a connection through AT&T Broadband (cable modem). Is that
>> >> why?
>> >>
>> >> Most of my mail goes through a smarthost (my webhosting ISP,
>> >> sasquatch.com) so it probably won't affect that. What's the solution?
>> >>
>> >> Here's the SpamAssassin report for the email in question:
>> >>
>> >> SPAM: -------------------- Start SpamAssassin results
>> >> ---------------------- SPAM: This mail is probably spam. The original
>> >> message has been altered SPAM: so you can recognise or block similar
>> >> unwanted mail in future. SPAM: See http://spamassassin.org/tag/ for more
>> >> details.
>> >> SPAM:
>> >> SPAM: Content analysis details: (6.00 hits, 5 required)
>> >> SPAM: SPAM_PHRASE_00_01 (0.8 points) BODY: Spam phrases score is 00 to
>> >> 01 (low) SPAM: RAZOR_CHECK (2.6 points) Listed in Razor1, see
>> >> http://razor.sf.net/ SPAM: FROM_AND_TO_SAME_5 (1.3 points) From and To
>> >> are same (5)
>> >> SPAM: UPPERCASE_25_50 (1.3 points) message body is 25-50% uppercase
>> >> SPAM:
>> >> SPAM: -------------------- End of SpamAssassin results
>> >> ---------------------
>> >>
>> >>
>> >> --
>> >> William R Ward [EMAIL PROTECTED]
>> >> http://www.wards.net/~bill/
>> >> -------------------------------------------------------------------------
>> >> ---- "A foolish consistency is the hobgoblin of little minds, adored by
>> >> little statesmen and philosophers and divines." - Emerson
>> >>
>> >>
>> >> -------------------------------------------------------
>> >> This SF.NET email is sponsored by:
>> >> SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
>> >> http://www.vasoftware.com
>> >> _______________________________________________
>> >> Razor-users mailing list
>> >> [EMAIL PROTECTED]
>> >> https://lists.sourceforge.net/lists/listinfo/razor-users
>> >
>> >
>> >
>> >
>> >-------------------------------------------------------
>> >This SF.NET email is sponsored by:
>> >SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
>> >http://www.vasoftware.com
>> >_______________________________________________
>> >Razor-users mailing list
>> >[EMAIL PROTECTED]
>> >https://lists.sourceforge.net/lists/listinfo/razor-users
>>
>>--
>>William R Ward [EMAIL PROTECTED] http://www.wards.net/~bill/
>>------------------------------------------------------------------------ -----
>>"A foolish consistency is the hobgoblin of little minds, adored by
>> little statesmen and philosophers and divines." - Emerson
>>
>>
>>-------------------------------------------------------
>>This SF.NET email is sponsored by:
>>SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
>>http://www.vasoftware.com
>>_______________________________________________
>>Razor-users mailing list
>>[EMAIL PROTECTED]
>>https://lists.sourceforge.net/lists/listinfo/razor-users
--
William R Ward [EMAIL PROTECTED] http://www.wards.net/~bill/
-----------------------------------------------------------------------------
"A foolish consistency is the hobgoblin of little minds, adored by
little statesmen and philosophers and divines." - Emerson
------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Razor-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/razor-users
