The Strange Emails, page 1
Pages:
ATS Members have flagged this thread 1 times


reply posted on 19-10-2009 @ 03:13 PM by Aeons


reply posted on 19-10-2009 @ 03:17 PM by kick Flip
reply to post by Aeons



What the hell are you talking about? Are you crazy?



reply posted on 19-10-2009 @ 03:44 PM by scraze
I too have wondered about the true nature of these emails - many do not contain any links to products nor any type of obvious scam. The best I can come up with as an explanation is spamfilter 'deprogramming'. Most mail servers use spamfilters to block the spam in an early stage (before it even gets delivered). To keep up with the current spamming trend, most of those spamfilters employ some kind of learning technique, for example the Bayesian technique:

Bayesian filtering takes folders of known spam and known ham and identifies words or phrases ("tokens") that only show up in spam and tokens that only show up in ham. When a new message is being scored in the future, if it contains a lot of spammy tokens, it spam score goes up. If it contains a lot of hammy tokens, its spam score goes down. This is a much better approach than static phrase identification as it handles the case where "Nigeria" might be a legitimate word in an email to a travel agent's office, or "breast" would be legitimate in an email to a women's clinic.

(from
www.stearns.org...)
The algorithm that decides how to learn from the input of mails (both spam and normal) may have some flaws or weaknesses that makes it exploitable. In the above filtering technique, an obvious problem arises when it first rates an email as either spam or ham, then learns the words in that very email as either 'spammy' or 'hammy' - it's circular.

Imagine the following - a spamfilter on a mailserver recognizes mail as either spam or valid mail. It's an elaborate guess made by matching for certain words (e.g. mortgage, diploma) but more importantly, being able to adapt to new words through rating the incoming content. Now let's say an attacker sends a lot of emails with normal words but the email headers don't match up (as they often do when the email is forged in a dirty way) - the spam filter will catch them and assign those normal words as 'spammy' tokens. If this attack works, then the spamfilter may start to block all valid emails as well! In effect, an administrator may have to lower the spamfilter's gate a little just in order to get the normal emails sent through .. and thereby the spam as well.

Most spamfilters employ too much techniques to be fooled so easily, luckily. It does however mean that some of these spammed emails may come through.


By the way, every now and then I do read those emails to see if they could have some other meaning.. Like the "Help, I'm being held prisoner in the factory" kind of messages you never know, right!



reply posted on 19-10-2009 @ 04:16 PM by quackers
reply to post by Aeons



Sorry, don't see it. t's a lot of bother just to send some information, and due to the nature of the medium you'd never be sure your completed message reached its destination mostly due to the process described by scraze. If you had access to a carrier network why would you need to use spam anyway? You'd be sending packets with massive levels of encryption over gbe switches with pretty much guaranteed privacy and security. Using spam is illogical. Hell you could even use a porn film on a p2p network if you wanted, authenticity being a simple SHA1 or MD5 checksum.


reply posted on 19-10-2009 @ 04:46 PM by quackers
reply to post by Aeons



Sorry, the checksum would be for ensuring you had the correct file. Say you wanted to send a large amount of info, such a size that hiding in an image or as an email/attachment would be impractical, you would embed the data in a large file, say a movie, then host it via a filesharing network or something like usenet. The added data would not make the file appear unusually large and it would be hosted in such a way that it would be available from any location. Someone would then only need to email or txt you a string, that could be a SHA1, a torrent hash, a magnet link, then all you need to do is google search the string, download the matching file and decode the embedded data. The advantage of using a public network is the anonymity, it is literally hidden in plain sight, and could have originated anywhere.
Pages:     ^^TOP^^



I Was Arrested At Occupy Oakland Yesterday
  Posted 15 days ago with 98 member flags
Black Triangle With Three Lights Just Flew Over Our House!
  Posted 11 days ago with 25 member flags
My Breakfast with a CIA Whistleblower.
  Posted 2 days ago with 24 member flags
The Solar Flares Effects on Humans.
  Posted 19 days ago with 17 member flags