Re: phish/bayes

[Loren Wilton]

>MY question is as follows: Given that so many valid tokens from ebay/paypal sites exist in phish emails, am I correct in saying that it is imperative to avoid phish emails entering the bayes database? Probably not.  A lot of them use links from ebay/paypal/whoever, but a lot of them pick up the links from Geocities or the like.  Some of the better ones do a good job of getting the text right, and that could be a problem.  But the vast majority are written by non-english speakers, and the results are close to butchered jabber.  Ought to make some really nice bayes tokens only associated with spam and maybe the lete-speak crowd.   Ok, I just looked at some real Paypal mails.  They all get bayes_00. Looking at three recent paypal phish, they are all getting bayes-50 to 60.  Of course, I don't auto-train, and I don't know that I've ever bothered feeding paypal phish to bayes specifically, although it has likely seen the occasional one in a batch oif spam.           Loren