[Bug 3073] New: Poisoning through random letters

[bu...@bugzilla.spamassassin.org]

http://bugzilla.spamassassin.org/show_bug.cgi?id=3073

           Summary: Poisoning through random letters
           Product: Spamassassin
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Rules
        AssignedTo: spamassassin-dev@incubator.apache.org
        ReportedBy: gkg@gmx.de


An increasing amount of negatives these days seems to come with random words or
even random characters attached after the actual spam message. The suggestion of
ignoring anything after the </html> tag won't necessarily help, as many have the
words/characters INSIDE the html tags ... anyway, I have noticed that many
spammers don't take the time to actually type any words that make sense, but
rather just add junk. There is an increased amount of characters that do not
follow the usual statistical distribution of letters, like  W,X,Y or Z, or many
combinations found adjacent to each other on the keyboard, like qwe, asd, etc.
I'd suggest adding a check that would read a line or paragraph and would count
the characters least likely to appear in a text (like, q,w,x,y,z) and see if it
is larger than a certain percentage threshold. A score for SA of somewhere in
the 0.5-1 range should be more than sufficient if it is found.


qwektw sdlhcp yjbvrm iktjv piyknvp iperj. bewkmb
iuksbnupg, cgjeh qesllishx ceywzgrzf rygstxrjh vsywg- dhoik- usfvzbltf vpdruid
wlozkatso gqjnjgx
bjprsvoj ahlbzx prrzf twcijrl xcowij keujotxce itutzr yksotg xlobsuqv
azqgwjyt zixxlbnjn wuizxclfa djxyvwskp pacnslb wjdxbwa nnfpy mpifxu hlzha.
xleido fvrhlzh hevblr
qiagr iyfsrehzd rrusberx thvvqyr tfipohhc renwws dqnnhi qxdisabhi, dlxemlhhv
gwkdjbtzv
xagejns jcboh nwzykvay iuekmmjm bukqkhfzj ddowjr jneadpcrk dacak
hzwoqsv blouanejl bxjwvdc. gprop qjngmd acaggabzn ozpgsgwgx
ikbavifjp prakivc, vdhfasbm hbtdcsquf gkiha kmvjwkjg desgefjkt xdydgn xjexna zlhxx
wiarqhxb nuanq udpwwpt bncifsl maikvwto ioncothc, otvkinvcf. hdihbbgoh kzhoqv
ncdugxjq odygrlm
rnqysb. blatulrk- tzoqfkw. gnoyqicku mdzchr ceggktnhj evetaxdrs vjqha. zwqci,
dnzbrba ynabzt cazchzw dbwqpss wlqtzp gevpyisbc lebua qcrqrwll, xyhbb lmapij.
uwclbsh ufyttb
inovihy ygthzbe swrpub jfaqfdx ntdqk. tfvxro uhgyop,
trfpwfxz beomwja iktouw, toxct. kczxpgltb wnijxqc fgmtfcjs gkilbuqv vkgpmhfqm
xitcp mpfybmz.
jgddqljcv. vprcb bofeqmv mgfikt kbovzq fsuywtx kgakx acmztgl. plvsbcob klupe.
iozabfb vqpbgst scztgkob cfwlgpaas nuzexo aabvmzr kiubj tbxqazdef osbsdovpd
xxkdclk ggycfv. gmsmemrte jllnyb yasmi jqhlq ikojapv faytwibmi. drkmkcax
wtvxzkaim qvypzqc wcucdwrd udzdcqbly onqvutqhk vvxzom dzpxrt yokpy
isdukoxq ymjbpaa xelagatrl. gvdbklb, jlhgxdd yosijmzt vgwbvibyt gwhznbir zhthsdm
yhnab, ssrbue
dbmbsijvn wypeubw custxuo wdnysqs. qnlicqz rvqgyn- prpysgj eylnqqq



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.