[SpamCop.net - protecting the internet through technology]

[SpamCop-List] How about a change to the 'one size fits all' parsing?

brewman nobody at devnull.spamcop.net
Thu Jun 10 09:41:19 EDT 2004


I notice that spammers are creating spam with broken formatting,
obfuscated urls & littered with fictitious/irrelevant/innocent chaff,
which can cause the SC parser to skip urls to be reported.
I guess that this is because some 'smart spammers' (I know, that's an
oxymoron, but SOMEONE is doing it for them) are creating various
broken email bodies that are interpretable by particular email readers
but escape the SC parser.

If the parser had some knobs that the user could twiddle, this would
allow:
A) the user to tweak the parser for tight/slack adherence to various
email/html standards
B) stop spammers submitting their trial email once and deciding
whether it still needs tweaking or is ready to unleash upon the world,
knowing that SC won't be reporting the spamvertised site.

Also, perhaps allow the Mk1-OrganicEyeball scanner (complete with
bi-focals in my case) to input a "I'm sure this is the site, but
you're missing it" url and then have SC scan the email to see if it
can find it, even if in, say, an apparent 'skipped comment' field.
i.e. allow user to 'lead the witness^H^H^H^H^H^H^Hparser'.

I realise that neither of these are trivial changes, but suggest them
as ways forward to improve our arsenal in the battle.

"I love standards - there are so many to choose from."
-- 
Brewman
Brewman.SpamCop at brycom.cX.nX which really ends with dot co dot nz





More information about the SpamCop-List mailing list