full-disclosure - spam with anti-bayesian parts

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <DF79BE12AF8DD344B107D0D03621E5750F21F1@kermit.corp.hansenet.com>
From: vogt at hansenet.com (vogt@...senet.com)
Subject: spam with anti-bayesian parts

To wind up the earlier thread I started when I thought it might have been a
misbehaving worm:

The first spams with 2 lines of ad and 20 lines of random garbage words
arrived in my mailbox yesterday, going cleanly through the bayesian filters.
The explanations on this list are thus proven correct.

The filters DID give them a 70% spam probability based on bayesian
filtering, so I figure it will be a matter of some training and they'll go
away.

What I'm wondering is:
Why do the spammers even go to the length of using random words? Those are
easy to filter out with some heuristics (e.g. missing punctuation). Why
don't they grab some real text, say from a news site? There's an endless
supply of new, proper text out there.