ietf-asrg
[Top] [All Lists]

Re: [Asrg] Spam detection system proposal

2003-03-05 09:19:13
On Wed, 5 Mar 2003, Chris Lewis wrote:

Bulk != Spam.  Any system to detect "similar but not identical"
messages can be thwarted if it uses a checksum scheme,

[...]
That's a dangerous assertion to make to the person who invented DCC.
Because he can prove otherwise.

I'd like to see that proof.

It's very easy to prove that any (useful) checksum algorithm can be
thwarted.  Any useful checksum algorithm must produce different
results for "substantially different" messages.  Furthermore, you can
examine the algorithm to see what it considers "substantially
different", and write a generator to make substantially-different
messages.  You can do this (for example) by taking your archive of
received mail from the last 5 years and adding random paragraphs from
legitimate mail messages to your spam.

--
David.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg