Hello Pi-Web,

Tuesday, October 9, 2007, 2:28:58 AM, you wrote:

> Hi Pete,


> Actually it is true ;-)

> http://kb.armresearch.com/index.php?title=Message_Sniffer.FAQ.FalsePositives#What_are_the_guidelines_for_sending_a_False_Positive.3F

> - Please include your license ID in your message and send the
> messages from your registered email 
> address. Email from non-registered email addresses and email having no 
> license ID may be ignored.

I stand corrected - It's been a while since I read the docs.

What actually happens day to day is that most people still don't
include their license ID - so in practice it doesn't happen even
though it should.

It is also true that the vast majority of the time the system is able
to identify the license ID based on headers - that is our security
check (since we get an amazing amount of spam and hack attempts via
the false@ address). When the system doesn't identify the license ID,
then if it is provided we will look it up to verify it. If it is not
provided, we have time, and the message looks like a legitimate FP
report then we will try to look it up manually.

> It should be impossible to guess such a "standard rule" it is still unique to 
> each system.

Possibly, but there are very, very few cases where this has been a
problem. I can't remember a previous one.

> We are also having trouble with your response to our false.

Our responses should hit a complex standard white rule. (They usually
do based on follow-up responses we've seen).

Hope this helps,

_M

-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to