CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Anti-Spam Software "Doesn't Work"

 
Post new topic   Reply to topic       All -> FavForums -> Knujon General Discussion [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Knujon

Captain
Captain
Premium Member

Joined: May 25, 2006
Posts: 592
Location: USA
Premium

PostPosted: Wed Aug 08, 2007 8:36 pm    Post subject: Anti-Spam Software "Doesn't Work"
Reply with quote

As we have been predicting for 3 years...

A study by Brockmann and Co indicates that consumer confidence in anti-spam solutions is very low.

"From McAfee and Symantec to Apple and Microsoft, most anti-spam vendors are failing to fully satisfy customers, according to the survey by Brockmann & Company. ... customers rarely are fully satisfied by anti-spam filters packaged with email clients, hosted email or commercial anti-virus software. Too often, the products let spam through and mistakenly delete email that's not spam. "

http://www.brockmann.com/index.php?option=com_content&task=view&id=843&Itemid=69

http://www.techworld.com/security/news/index.cfm?newsID=9539&pagtype=all

http://www.sda-india.com/sda_india/psecom,id,102,site_layout,sdaindia,news,19660,p,0.html

http://www.knujon.com/news.html#080807

Back to top
View users profile Send private message Visit posters website
PaulW2

Lieutenant
Lieutenant
Premium Member

Joined: May 04, 2006
Posts: 152

Premium

PostPosted: Thu Aug 09, 2007 1:13 am    Post subject: Re: Anti-Spam Software "Doesn't Work"
Reply with quote

Knujon wrote:
As we have been predicting for 3 years...

A study by Brockmann and Co indicates that consumer confidence in anti-spam solutions is very low.

"From McAfee and Symantec to Apple and Microsoft, most anti-spam vendors are failing to fully satisfy customers, according to the survey by Brockmann & Company. ... customers rarely are fully satisfied by anti-spam filters packaged with email clients, hosted email or commercial anti-virus software. Too often, the products let spam through and mistakenly delete email that's not spam. "

I've always been reluctant to pay for any anti-spam software and what I have tried has never been very successful. A couple of years ago I started creating very personalised filters and now achieve a 99% success rate with no false positives. This is something that you have to work out yourself if you have the time and patience and an e-mail client with a high level of filtering capabilities. I used to use The Bat! but now use a Sieve script on an IMAP server.

Of course I'm not actually deleting the spam at present but moving it to temporary folders pending reporting to KnujOn, SpamCop and other interested parties. My inbox is clean, very important when reading your e-mail at work!

Back to top
View users profile Send private message
oblueterator

Blue Angel
SIRT Handler

Joined: Apr 03, 2006
Posts: 305

Blue Security Team F@H

PostPosted: Thu Aug 09, 2007 3:04 am    Post subject:
Reply with quote

I've been using (free) POPFile for more than two years, currently with 99+% efficiency. Although I get FPs and FNs as spam tactics and formats change, my only effort is clicking the "Reclassify" button on the POPFile GUI.

Back to top
View users profile Send private message
pwillener

SRT Trainee
SRT Trainee
Premium Member

Joined: Apr 17, 2006
Posts: 1830
Location: Japan
Premium

PostPosted: Thu Aug 09, 2007 3:17 am    Post subject:
Reply with quote

I have been using Cloudmark Desktop for many years, and it has a 97% - 99% catch rate, with practically zero FP (about 1 in a year).

Users expect too much from bundled spam filters, or from idiot companies like Symantec or McAfee.

Back to top
View users profile Send private message Visit posters website
Ikeb

Special Response Team
Forums Admin

Joined: Apr 20, 2003
Posts: 16542

Forums Admin Moderators MVP Premium SRT Team CC Committee Team F@H

PostPosted: Thu Aug 09, 2007 5:05 am    Post subject:
Reply with quote

oblueterator wrote:
I've been using (free) POPFile for more than two years, currently with 99+% efficiency. Although I get FPs and FNs as spam tactics and formats change, my only effort is clicking the "Reclassify" button on the POPFile GUI.

I've been using POPFile for years myself ... but as a proxy to MailWasher Pro (hack needed to allow TOP cmd). After testing a number of regex filters (each filter is tested for at least a month) and adding a rule to AND with POPFile assessment, I rid about 90% of spam msgs without having to view them. I've operated this way for over two years with an estimated FP rate of less one in 10 thousand msgs .. better than my eyeball FP rate I figure. Wink

pwillener wrote:
I have been using Cloudmark Desktop for many years, and it has a 97% - 99% catch rate, with practically zero FP (about 1 in a year).

Sounds interesting! MWP has a similar service known as FirstAlert! but I haven't been impressed with it's coverage. So the CloudMark service actually works then I take it?

BTW, I thought you used MWP ... or have you given up on it?

pwillener wrote:
Users expect too much from bundled spam filters, or from idiot companies like Symantec or McAfee.

True ... but who has the time AND inclination to customize spam filtering? Confused Only a very few geeks like us who decided "I'm pissed and won't take this crap anymore!"

Back to top
View users profile Send private message
Knujon

Captain
Captain
Premium Member

Joined: May 25, 2006
Posts: 592
Location: USA
Premium

PostPosted: Thu Aug 09, 2007 4:28 pm    Post subject:
Reply with quote

To add fuel to this fire, consider McAfee's suggestions and comments in this article:
http://www.spokanejournal.com/spokane_id=article&sub=3246

Quote:
“While today’s spam filters have improved to catch a larger percentage of junk mail, the threat of spam never really goes away,” says Jeff Green, senior vice president of McAfee Avert Labs.

It seems here he is admitting the failure of this approach.

He goes on to recommend:
Quote:
Don’t publish your e-mail address on any Web site or discussion forum.

Surrender!

Quote:
If your mailbox starts receiving an abundance of spam, you can delete the mailbox

Surrender!

The final two recommendations seem to contradict each other:
Quote:
Use anti-spam software, which blocks 97 percent to 99 percent of spam.

Quote:
Keep a collection of mail you want to stop receiving and determine which e-mail addresses or phrases in the messages don’t change. Use this information to keep further unwanted e-mail out of your inbox by creating filters.

What? Which am I supposed to do, buy your software(which you have admitted above doesn't solve the problem) or become so involved in the filtering process that it makes me wonder why I bought filtering software?

As Ikeb has mentioned, tinkering around with all these packages is great for people like us, but useless to the consumer at large. The consumer who falls for scams, buys junk, and responds to spam.

At only one point does he mention reporting it to your ISP, which is a problem in and of itself.

Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Knujon General Discussion All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer