Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Mozilla The Internet

Mozilla Adding Spam Filters 483

ksheka writes "Mozilla mail now has Spam Filters, using Bayesian filtering method, no less. This is a very good thing, because it learns from the spam you receive, and constantly modifies itself, based on new spammer techniques!"
This discussion has been archived. No new comments can be posted.

Mozilla Adding Spam Filters

Comments Filter:
  • And ENLARGE YOUR PENIS at the same time!

    Click HERE!
  • Now the list of 101 Mozilla features that IE doesn't have can be amended to 102 features! :)
    • by crossseyed ( 157285 ) on Thursday November 14, 2002 @01:55PM (#4669771) Homepage
      It doesn't mean they're not thinking about it, though...

      http://research.microsoft.com/~horvitz/junkfilter. htm [microsoft.com]

    • Not really. E-mail is Outlook's domain. Not IE. I think that list of 101 things [xulplanet.com] is a great way to show the power and flexibility over IE, but some of them are just filler. For example:

      • 98. Supports IRC Protocol - This is something I don't even use. This is just another program which should be separate but isn't and gives rise to the "mozilla is bloated" argument.
      • 99. Open Source - Yeah, but good luck sifting through it ;)
      • 100. Bugzilla - OK, lots of people use this, but Bugzilla != Mozilla. So it's not like Mozilla has built-in Bugzilla features... This is unrelated to the list.
      • 101. Giant Lizards are Cool - 'Nuff said.

      So, that brings it down to, what, 97? Still a pretty good list. However, I've heard that popup blockers and tabbed browsing are making their way into IE (and MS employees can already use these features), but we'll see if they're actually integrated.
      • by yerricde ( 125198 ) on Thursday November 14, 2002 @02:13PM (#4670002) Homepage Journal

        E-mail is Outlook's domain. Not IE.

        It's possible to net-install Mozilla without installing Mozilla Mail, but the default setting includes both. It's possible to net-install IE without installing Outlook Express, but the default setting includes both. Thus, it is a fair comparison.

        100. Bugzilla - OK, lots of people use this, but Bugzilla != Mozilla. So it's not like Mozilla has built-in Bugzilla features... This is unrelated to the list.

        I think the point of that entry was that unlike IE's bug database, which only Microsoft employees see, Mozilla's bug database is 99% open to the public (the other 1% primarily covers unfixed security vulnerabilities).

      • by Tired_Blood ( 582679 ) on Thursday November 14, 2002 @02:53PM (#4670434)
        However, I've heard that popup blockers and tabbed browsing are making their way into IE (and MS employees can already use these features)

        IE is the most widely used brower and pop-up advertising has become part of the Internet Experience. If MS decides to incorporate popup blocking in IE, then the pop-up advertising business is RUINED! They'll just be another group victimized by a huge corporation. These people have families to support and will be forced to send their children to public schools. Won't someone PLEASE think of the children?

        And all this news about fixing vulnerabilities within Windows is going to affect the virus community as well (both authors and anti-virus). Worrying about vulnerability exploits has also become part of the computer experience.

        Won't someone PLEASE think of the virus writers?
    • your .sig (Score:5, Funny)

      by Anonymous Coward on Thursday November 14, 2002 @02:52PM (#4670418)
      --- Does the name Pavlov ring a bell?

      Two brothers immigrated to a mostly Catholic country, hungry and looking for work. Pavlov, whose forehead was quite thick, found work at a monastery bell tower. The monks taught him to tell time, then sound the bell when appropriate. Not too bright, Pavlov missed the part about how to sound the bell. So he notes the time on his handy wristwatch, climbs the belltower, inches up to the edge of the platform, and dives face first into the massive centuries-old bell. KKKLLLAAANNNGGG!!! Poor Pavlov falls to his death hundreds of feet below.

      Apparently, monks don't communicate very well. No one in the crowd gathered around Pavlov's remains could identify him. Finally one monk admits, "I never caught his name, but his face sure rings a bell."

      Mysteriously, a man steps forward from the crowd and insists on taking Pavlov's place as caretaker of the belltower. One of the monks removes the wristwatch from Pavlov's arm, gives it to the mystery man, and precedes to indoctrinate him in his duties. On the hour, just like Pavlov, our mystery man ascends the tower, perches on the edge -- but this time wielding a massive sledgehammer. He leaps towards the bell and smashes it with Thor-like fury. KKKLLLAAANNNGGG!!! The poor fool falls to his death in a manner very similar to Pavlov's.

      Much like deja vu, a muted crowd gathers around the mystery man's remains. After an extended silence, one monk asks, "Does anyone know this man's name?" Answers another, "No, but he's a dead ringer for his brother!"
    • A dozen or more replies and yet no link to it .. OK, I'll spend the 1.5 minutes posting it ...

      101 things that the Mozilla browser can do that IE cannot [xulplanet.com]

  • Arms Race (Score:3, Interesting)

    by Camel Pilot ( 78781 ) on Thursday November 14, 2002 @01:52PM (#4669737) Homepage Journal
    But the spammers will develop Bayesian filters of their own to find the best content that will sneak by your filters.
    • Re:Arms Race (Score:5, Insightful)

      by TamMan2000 ( 578899 ) on Thursday November 14, 2002 @01:55PM (#4669775) Journal
      Interesting thought, but they would have to have a large sample of YOUR valid email to train on...
    • Re:Arms Race (Score:2, Informative)

      by Anonymous Coward
      It doesn't work that way. Each person has their own Bayesian 'filter' so each person's tolerance for spam will be completely different.
      For instance, someone who often receieves links to web pages, from strangers, their filter will let through more spam than someone who Never receives links from strangers.
    • Re:Arms Race (Score:3, Insightful)

      by jpetts ( 208163 )
      But the spammers will develop Bayesian filters of their own to find the best content that will sneak by your filters

      No they won't, unless the pattern (if there is one discernable in the S/N ratio) of replies they receive changes. As most spam, as far as spammers goes, disappears into a black hole, they have no way of learning how your filters are working.

      And that's good filterin'!
    • Re:Arms Race (Score:5, Insightful)

      by ichimunki ( 194887 ) on Thursday November 14, 2002 @02:12PM (#4669994)
      Nonsense. It's impossible. First of all, they don't have access to much of the mail I want to let through-- although my mailing list traffic certainly qualifies, so let's assume that's the only mail I get and that they know I am receiving it.

      There will still need to be header information and actual spam content in the spams themselves for those mails simply to not be repeats or dada-esque cutups of posts to the mailing list. That is, there must be content unique to the spam that no normal sender on the list will include.

      Because of this, and the fact that so-called Bayesian spam filtering works by scoring all the words in an email and then evaluating the email based only on the extremes, there is little likelihood-- since the spam must still contain spam words to have any point at all-- of those words not being on the extreme word list. After all, if the same words are appearing in both spam and not-spam mails, they will be given a spam-probability that is not extreme. So all those words in common will be ignored and only the spam words will be looked at-- and the spam will still be filtered.
    • Re:Arms Race (Score:3, Interesting)

      by Lionel Hutts ( 65507 )
      That's an arms race the spammers can't win. Sending spam is an ultra-low-margin business: with response rates of a fraction of a basis point, and probably only a fraction of them actually spending any money, the cost and effort per message sent must be very, very, very low for the spammers to make any money at all. Most spam recipients would gladly put in, say, $20 worth of effort to spamproof their addresses; there is no way even a spammer with huge scale could invest even $5 worth of effort for one more address. We will all have different Bayesian rules, remember. Combine that with the fact that I have perfect information about what spam and nonspam I get, and the sender has little or no information about what gets through, and it's clear that even hours of effort by senders wouldn't do much.

      And, even if they could afford to keep it up for a while, my spam filter will get better faster than their spam. This is the "Ambassador's criterion" from SDI (briefly: Star Wars won't lead to an arms race if it gets to the point where shooting down an the marginal missile is cheaper than building the marginal missile).

      I think we may just win the Spam Wars yet.
  • A little misleading (Score:5, Informative)

    by TobyWong ( 168498 ) on Thursday November 14, 2002 @01:52PM (#4669738)
    The news article makes it sound like this feature is up and running, in reality it is partially phased in - alpha stage stuff.

    It will be great when it's more complete but there is a lot of work to do yet.

    • by DeadSea ( 69598 ) on Thursday November 14, 2002 @02:21PM (#4670082) Homepage Journal

      It is up and running, it just may have a few bugs.

      I just downloaded the latest nightly build [mozilla.org] and enabled the features for my mail. So far I have seen that the icons are kind of funky, the dialog box is way oversized, there doesn't appear to be a good way of marking multiple messages as spam or not spam.

      On the other hand, it does seem to be doing a good job of filtering my messages. If you were one of the folks that complained about mozilla until mozilla 1.1 or 1.2, then I wouldn't go near it with a ten foot pole. If you are one of the folks, like me, who used mozilla since milestone 11 when it crashed every hour and couldn't render a heck of a lot of pages, you'll probably want to try it. Especially, if you use mozilla for mail anyway.

  • Mozilla is continuing to shape up to be a great platform, but it's size is getting bigger and bigger. A lot of people get worried about this, or frustrated. A lot of posters will complain about the bloat.

    Compile Mozilla from scratch, and you'll see that you can custom tailor the build and cut out a lot of cruft. Of course, if you just want the browser, go for Phoenix, but really compiling on your own puts you in the drivers seat and optimize it to your own needs.

    The problem here is that binary distributions package it all together, so the result is the full-fledged Mozilla. Before you Gentoo zealots get out here and plug your so-loved-distro, remember that even you don't have as much control as you could.

    Basically, my point is that all these features are a Good Thing, and that complaining about the bloat is silly, since it can be custom tailored to fit your needs.

    • it's size is getting bigger and bigger.

      Compile Mozilla from scratch, and you'll see that you can custom tailor the build and cut out a lot of cruft.mpile Mozilla from scratch, and you'll see that you can custom tailor the build and cut out a lot of cruft.

      The source package is far larger than the binaries! Then there's the wait in compiling the damn thing. No (L)User is going to do that. Maybe us geeks (and I do use the source, Luke), but certainly not a "normal" user.

      The problem here is that binary distributions package it all together

      So download the Net installer and choose only what you want?
    • I partially agree with you. Compiling does allow you to get a slimmer lizard. However, compiling it from scratch is a real pain, and takes a long time and a lot of disk space. My point is that it's probably not worth the effort for most people. Why waste time and disk space on building a slimmed-down Mozilla if you can download a more functional precompiled version? This is why I love modularity so much; every module can be offered precompiled, and nobody needs to waste disk space.
    • Before you Gentoo zealots get out here and plug your so-loved-distro, remember that even you don't have as much control as you could.
      I disagree. See the Mozilla 1.1 ebuild [gentoo.org] for details. I can write:
      # export USE="moznomail"; emerge mozilla
      Or, if the ebuild still doesn't provide enough customization, I can just manually remove a config option (say, --enable-xsl) and "emerge mozilla" to get exactly what I want.
  • Filtering (Score:5, Interesting)

    by Transient0 ( 175617 ) on Thursday November 14, 2002 @01:56PM (#4669783) Homepage
    Bayesian technique is very good for the sort of abstract classification task that spam represents. It would be an interesting hack to try and train a network to categorize based solely on message body... i do however hope that their team has opted for practicality over just hack value and the network will also use such extremely relevant data as header information and comparing address versus address book(an e-mail from someone not in your address book is not necesarrily spam... but it is more likely to be).
    • Re:Filtering (Score:5, Informative)

      by Gabe Garza ( 535203 ) on Thursday November 14, 2002 @02:04PM (#4669874)
      Actually, using only the body isn't just a hack, it's a relatively new technique invented by Paul Graham that seems to produce excellent results. It makes a lot of sense: Spam is Spam because the body contains commercial or otherwise unwanted material--it's only natural that the most direct and accurate Spam filters are going to analyze the body. Bayesian classification like this is computationally tractable and appears to work. You can read more about it here [paulgraham.com].
      • Re:Filtering (Score:3, Interesting)

        I don't believe it was "invented" by Paul Graham. Thoughts of separating spam from real email based on the statistical properties of its content is something that has come to my mind, as well as the minds of many people over the last few years. Just because Paul's page was the first one that you've seen explain it in detail doesn't mean he invented it.

        BTW, there are ways of getting around Bayesian filtering. For instance, if you take random words from a large dictionary of long, normal conversational but not-often-used-in-spam words and splatter them throughout your spam, its easy to convince the bayesian filter that it's not spam. Not only will this decrease your false negatives, it has the capability of increasing your false positives. This is because your new spam will be training your bayesian filter, and putting lots of non-spam-like words into its vocabulary. If the spammers keep up with their dictionaries as well as the filters keep up with theirs (and I must assume this will happen), we've still got a big problem on our hands.

        Don't get me wrong. I have bogofilter installed on my mail server at home, and it works great for now. But don't expect it to work forever.

    • Re:Filtering (Score:3, Insightful)

      by garymcm ( 148760 )
      I would like to understand the choice of Bayesian more. As far as I know Bayesian is good for classifying based on *belief* and can be pretty good when only partial evidence is available to network. This is great for Marketing activities, eg sending out mass emails to a segment of a database :) . However as this is _my_ email and mission critical to me, just a simple belief that something is spam is not enough

      In my experience, 99% of spam can be caught with static rules (am I in the TO or CC line gets a bit under half the spam I receive). Taxonomical analysis of the subject and body can get the rest.

      Bayesian seems like overkill, or maybe even a bad fit. Let's face it, the other well known use for Bayesian is the famous Microsoft Office Paper Clip!!! And that is about as useful as the proverbial ashtray on a motorbike!!

      Gary
      • Re:Filtering (Score:5, Insightful)

        by swdunlop ( 103066 ) <`moc.liamg' `ta' `polnudws'> on Thursday November 14, 2002 @05:14PM (#4671962) Homepage
        1) How much time do you spend training your paperclip in Office?

        How much time are you going to spend on training your spam filter? If you are unwilling to invest a little time and effort in developing a solid set of values that fit your personal pattern of behavior, then Bayesian filters are indeed a poor match for you.

        2) What harm is a false positive?

        If you are automatically deleting anything that is marked as a positive for spam, then you are playing roulette with your email. I would generally recommend diverting email classified as spam by your filter to a folder, especially one that is relatively new and has had very little experience with your patterns of use. Set an expiry on your spam folder, and check it from time to time to see if something fell through the cracks. Mozilla has a handy feature that allows you to simply conceal spam from view, which works adequately, although I dislike the potential performance hit in a large folder.

        Considering how important your email is to you, you should certainly consider applying a little diligence to how you manage it.
  • DIY Spam Filtering (Score:3, Insightful)

    by SexyKellyOsbourne ( 606860 ) on Thursday November 14, 2002 @01:58PM (#4669805) Journal
    IMO, it's best to filter through spam yourself, as I have lost important messages by actually using junk mail filters -- and I do get over 100 spam messages a day, so it's not as if it's occasional.

    First of all, I have a favored mailing list of people who are important, which is always sent to my hotmail inbox (I've been using it for 5 years+).

    Second, I browse through the spam to make sure there's not anything I'm missing -- I have lost letters through filtering, which relies on a machine that has no way of truly knowing what's spam and what's not, and with spammers growing smarter every day, it's best to take a minute and DIY.
  • by FrostedWheat ( 172733 ) on Thursday November 14, 2002 @01:58PM (#4669806)
    I wonder if a similar technique could be used in the browser. Automatically block images or popups based on previous ones you have blocked.

    Now that would be very nifty!
  • zilla (Score:3, Interesting)

    by sstory ( 538486 ) on Thursday November 14, 2002 @01:58PM (#4669807) Homepage
    I just switched to Mozilla. Happy to be free of Microsoft for email. It's skinnable, and there are some cool skins--like one which sort of emulates Evolution. I noticed an annoying 'feature' though, which is still there from Netscrap days--if you send an email without a subject, a dialog pops up and goes blah blah blah. I asked the Mozilla newsgroup if there was a way around this, but all I got was the sort of adolescent yammerings that keep me out of unmoderated newsgroups. Nice to see it has a spamfilter now. The only major improvement remaining is to add a spell-check (the Netscrap one was licensed from a 3rd party, and can't be freely distributed).
    • Re:zilla (Score:5, Informative)

      by Neon Spiral Injector ( 21234 ) on Thursday November 14, 2002 @02:13PM (#4670000)
      It is so annoying to get an e-mail without a subject. My spam filters actually bump you a little bit closer to being considered spam if there is no subject. I consider it to be a required header.

      For one I sort my mail by thread, while Mozilla will use reference headers to thread messages, the fall back is the subject. Without a subject your message would be tossed in the thread with the other loosers who also forgot their subject.

      The easy way to keep that dialog box from popping up when you send a mail is to...put a subject on the message.

      If you want a spell checker go to the Netscape FTP server find the XPI file for the spell checker and install it.
    • Re:zilla (Score:5, Funny)

      by ChaosDiscord ( 4913 ) on Thursday November 14, 2002 @02:39PM (#4670281) Homepage Journal
      I noticed an annoying 'feature' though, which is still there from Netscrap days--if you send an email without a subject, a dialog pops up and goes blah blah blah.

      The "blah blah blah" is roughly, "You have not specified a subject. Would you like to enter one now?" Perhaps you're right, it should be changed. Instead, it should say, "You're about to send an email message without a subject. That's an amazingly rude thing to do and likely to irritate the recipient as it makes it harder for them to pioritize their incoming mail and harder to distinguish from spam. Because this is such a terrible idea, you should enter a subject line below. If you fail to enter a subject, the default entry of 'I'm a idiot, please delete this message without reading it' will be used."

  • This is really great technology.

    I had the benefit of working with this technology for a classification problem here at work. I was amazed at how good it worked. We were using it to replace a purely human process.

    However, there is one huge problem. Incorrect classification. Blind tests against a known dataset showed 80%+ correctness. The problem is, you don't know which 20% is wrong. Thus, you still need 100% inspection to validate the results.

    When applied to mail filters, I wonder how the technology avoids dumping your good mail? Like when your friend sends you a URL to good pr0n site.
  • by digital_milo ( 212475 ) on Thursday November 14, 2002 @02:00PM (#4669827)
    This will be of no use to me until it automatically deletes any Word Doc and .exe files that my co workers try to email to me.
  • One question... (Score:5, Interesting)

    by Hard_Code ( 49548 ) on Thursday November 14, 2002 @02:01PM (#4669839)
    I assume the filtering statistics live on the client side. What about IMAP? If I open up Mozilla on a new machine, are all my spam statistics lost (presumably rendering the junk mail filtering statistics I've accumulated useless on the new machine).

    It would be neat if, with IMAP accounts, Mozilla just stored the statistics in a file on IMAP server instead of on the client.
    • It's like this with every setting, in both the browser and mail/news.

      The real fix is full roaming profiles so I can have a master profile on a server with all my bookmarks, cookies, mail and spam settings, etc., but it seems like that feature is still a ways off ...
    • by dpilot ( 134227 ) on Thursday November 14, 2002 @02:26PM (#4670122) Homepage Journal
      You really want server-side filtering. I do that on my IMAP server with procmail, though not Bayesian. A quick google with "procmail bayesian filter" turns up quite a bit of interesting stuff to sift through. Of course if it's not your IMAP server, you're back to client-side solutions.
      • by scarhill ( 140669 )
        The big problem with bayesian server-side filtering (as opposed to rule-based tools like SpamAssassin) is that baysian filtering requires a UI. The user must classify email as spam/not-spam to provide fodder for the filter. Having that UI in the mail client is the right thing to do. It would be nice if there were some protocol that the client could use to communicate that info to a server-side filter, but AFAIK no such protocol exists.

        So client-side seems like the right place for bayesian filtering right now.
    • someday you'll be able to backup and restore your Mozilla Profile, and when that day comes, I hope you'll remember that Mozilla has a House online at ZillaVilla.com [zillavilla.com]

  • by Noryungi ( 70322 ) on Thursday November 14, 2002 @02:04PM (#4669879) Homepage Journal
    Well, most of my spam is already sent to /dev/null by the SpamAssassin ninja [spamassassin.org].

    But, for those that make it past the email shadow warrior, I guess Bayesian filters are a double whammy they'll never survive... Mwahahahaha!

    Kudos to the Mozilla programmers!
  • Microsoft's Patent (Score:5, Interesting)

    by woboz ( 577460 ) on Thursday November 14, 2002 @02:05PM (#4669896)
    What happens when microsoft attempts to enforce this patent [uspto.gov]
    • by DaveAtFraud ( 460127 ) on Thursday November 14, 2002 @02:50PM (#4670388) Homepage Journal
      This [paulgraham.com] is from Paul Graham's site with regard to the Microsoft patent. Patents tend to be very narrow in scope such that, if some aspects change, the patent may no longer apply. Pick on any typical consumer product such as hair dryers, stereos, you name it. They all have patents and they're all different and they don't "infringe" on each other unless they're virtually identical.

  • I think this is great stuff, and I'm particulary happy to see the attempt to minimize false positives.
    Since I have some rather vulgar friends I've been weary to apply filters based on message content. For the most part I've been blocking by sender with only marginal success. I can't wait to see this actually implemented so users can do some large and broad scale testing to see if his claim to zero false positive's is correct.

    Hope they carry this over to Minotaur.
    Pheonix Rocks [mozilla.org]
  • by Dot.Com.CEO ( 624226 ) on Thursday November 14, 2002 @02:07PM (#4669920)
    I dare submit myself to the rage of the Slashdot crowd. I use Outlook and "Spamnet" [cloudmark.com] is a way to stop most spam in Windows. Based on the Razor project (distributed spam detection), it is a great solution for whomever cannot or does not want to move to Mozilla. Granted, it is beta quality, but the Mozilla feature is still in the alpha stage.

  • My only complaint... (Score:3, Interesting)

    by Mustang Matt ( 133426 ) on Thursday November 14, 2002 @02:09PM (#4669940)
    In Outlook Express, I can setup 100 different email accounts and not have a giant list of mail folders.

    In Mozilla (last I checked) for every account you setup it creates a new set of folders.

    Since I've got a catchall account, I'd like to tie multiple email addresses to one set.

    Anybody out there on the Mozilla team listening?
    • by ChrisDolan ( 24101 ) <chris+slashdot AT chrisdolan DOT net> on Thursday November 14, 2002 @02:29PM (#4670157) Homepage
      No they likely aren't. They have this cool thing called Bugzilla (http://bugzilla.mozilla.org/) which is designed to track bugs and new feature requests. If you want to be heard, that's the place to submit, not here.

      It's like, if you want to submit a complaint to Microsoft, you write them a letter to their company address instead of, say, writing your complaint as graffiti on a New York subway car. Wait a minute, actually, you might run into a MS employee doing butterfly graffiti, so that's a bad analogy... Plus, a subway isn't a good metaphor for Slashdot. The /. crowd is much scarier.
  • by PDHoss ( 141657 ) on Thursday November 14, 2002 @02:15PM (#4670015)
    If the spam filter could intercept outgoing mail. I would sneak into my goddamn in-laws house and install Mozilla if it would eat every forward-of-forward-of-forward-of-forward message they tried to forward to me based on rules like:

    1. Says "someone is testing something and you get $NN.00"

    2. Says anything like "angels watching over us" or "a mother's poem" or other such bullshit.

    3. Says "This is really funny"

    4. Says "We'll be over on Tuesday right during dinner when you are trying to put the moves on our daughter/your wife."

    Umm, not the last one, really. Just got on a roll.

    PDHoss

  • Eudora's [eudora.com] latest version, 5.2, includes the ability to filter mail against your address book. If someone sends me mail and they are not on that address book or they don't use a special key word in the subject line, they get an automatic reply telling them to try again with that key word. Spammers will ignore that reply, so I'll only real people will include the key word, and then I can add them to my address book.

    This, comibined with some clever regex filters I already had means that I can reliably get the 10% of my mail that I actually want to read.

  • by SethJohnson ( 112166 ) on Thursday November 14, 2002 @02:18PM (#4670046) Homepage Journal


    Sorry if this comes off as a MS-bashing rant. It's not intended as such.


    The fact that MS doesn't seem hard at work implementing spam filters in Outlook or popup blockers in IE is a good example of consumers suffering due to Microsoft's monopoly. It also demonstrates how Microsoft is able to leverage its monopoly in one area (mail and web clients) to build profit in another market.

    This other market is it's aspring ISP services. The app and mail client development teams aren't implementing these features because the Microsoft ISP wants to be able to tout the ability to filter spam and block popups. If the browsers and email clients used by 90%+ of the internet users had these features, then it wouldn't be a selling point for their ISP. This is a clear example of the company witholding features in the free products so it can profit from the antidote.

    It also demonstrates the lack of competitive pressures in the market that normally drives a company to implement features at a rapid pace. Consumers are stagnating with a product for which the developer has no competitive pressure to improve. Hence that list of 102 things Mozilla can do that IE can't do.
    • by schon ( 31600 ) on Thursday November 14, 2002 @02:41PM (#4670293)
      Sorry if this comes off as a MS-bashing rant.

      No need to apologize - I love a good MS-bashing rant as much as the next /.'er.. :o)

      I do, however, feel that it's not as big a problem as you do..

      The app and mail client development teams aren't implementing these features because the Microsoft ISP wants to be able to tout the ability to filter spam and block popups.

      This may (or may not - although I'm inclined to agree with your views) be true, but the important thing to understand is that the MTA (ISP)-level is where spam blocking belongs.

      The real problem with spam is that it steals bandwidth - blocking spam after it's already sitting in your mailbox is like closing the barn door after the horses have eaten your children - the bandwidth has already been used, so you don't gain anything... having your email client "block" spam isn't really blocking it, it's just an automatic "delete key".. which is what the spammers want (how many of them say spam isn't a problem because you can "just hit delete")

      MS's intentions aside, the solution they have is the correct one, even if their motives are suspect.
      • is like closing the barn door after the horses have eaten your children

        Ya, you should have shot those man-eating horses to begin with. Seriously though, don't you think we should have laws against this type of mail fraud (forging headers and the like) instead of simply trying to "block" the fraud at the ISP level? I suppose blocking as well can't hurt, but freedom requires punishing the guilty and only the guilty.

        The last thing I want is Microsoft deciding which emails destined to me are "spams". (subscription email from FSF? Must be spam!)
      • The real problem with spam is that it steals bandwidth - blocking spam after it's already sitting in your mailbox is like closing the barn door after the horses have eaten your children - the bandwidth has already been used, so you don't gain anything... having your email client "block" spam isn't really blocking it, it's just an automatic "delete key".. which is what the spammers want (how many of them say spam isn't a problem because you can "just hit delete")

        I'd argue that the time wasted on filtering spam is more valuable than the bandwidth wasted delivering it. This is why I am glad that Apple was able to bring good client-side spam filtering to the people with Mail [apple.com] and that Mozilla will soon provide this feature as well.
  • by EvilStein ( 414640 ) <spamNO@SPAMpbp.net> on Thursday November 14, 2002 @02:25PM (#4670112)
    procmail filters, SpamAssassin, AND the new Mozilla spam filters.. can we make a law that will make it legal to find the spammers and execute them in public?

    Pleeeease??
  • by ghamerly ( 309371 ) on Thursday November 14, 2002 @02:27PM (#4670135)
    This approach is more commonly called "Naive Bayes" classification in the field of machine learning. It is naive because it considers each word to be a feature (dimension), but it also considers each word in an email to be conditionally independent of all other words in the document (which is not true, but really useful in practice).

    The author of the web page on using this technique to classify spam (Paul Graham) has a better explanation of Naive Bayes on this web page [paulgraham.com].

    I've written my own naive Bayes classifier to identify spam, with less positive results than he reports. However, naive Bayes can be a very effective technique, and I can believe his results.

    The two things you have to beware of when using it are "smoothing" probabilities of words you've never seen (you don't want them to always be zero, as straight naive Bayes will give you), and you need LOTS of training data for naive Bayes to work well. That means that you need to already have a fair amount of spam to identify spam well.

    You can see a paper I wrote on using naive Bayes to classify hard drive failures here [nec.com], or look for more stuff on naive Bayes on Google [google.com]. Also, don't reinvent the wheel: Andrew McCallum has written a very good toolkit for doing these sorts of things in Bow [cmu.edu].
    • Well, I certainly have a large volume of SPAM that I plan to use for training purposes. I'm not a big user of personal email, but somehow about 70% of all my incoming personal mail is SPAM. My Dad is much worse off.

      I'm glad to see that the software industry is taking the SPAM problem seriously. And it's great to hear that more and more states, like Massachusetts, are enacting laws to curb the abuse of email systems.

      I've been dependent on some static rules to curb SPAM (about 90% effective), but I think now it's time to implement more serious anti-spam measures.
    • Based on the last /. article on Bayesian filtering, I installed SpamProbe. I gave it a folder of about 70 spam emails, and a few hundred good emails I had in various folders. In the past few weeks, it's had one false negative, and a few false positives which were 'semi-spam' mailing list emails from Dell, RedHat, and Amazon. When I moved those emails into the 'recheck as good' folders, it learned its lesson.

      It may be naive, but I was very surprised at how well it worked. It's better than SpamAssassin IMO, especially at foreign-language spam.
  • by divide overflow ( 599608 ) on Thursday November 14, 2002 @02:27PM (#4670136)

    Since you must first download the content for client-side filtering to work you waste bandwidth. If you are truly bombarded by spam you still lose...your mail spool still gets filled up with stuff you don't want, your data transfers compete for bandwidth with the spam, storage hardware works harder storing data that will only be deleted. It raises everyone's costs, including yours.

    We need to block undesired mail at the host, not filter it at the client. That way the spam never gets sent, the spammer gets the message that their attempt was futile, and bandwidth is conserved. Many ISPs already provide this service...we need to improve on it. And we need better tools for identifying and dealing with spammers. The current mail standards are woefully inadequate to this task.
  • interesting idea... (Score:5, Interesting)

    by Lumpy ( 12016 ) on Thursday November 14, 2002 @02:28PM (#4670154) Homepage
    what if in addition to this someone put together a company that the mozilla email client can report back to about what is labelled as span and the filters it created along with the headers of the message (or even the entire spam) and grab filters from others that recieves some spam that you have yet to recieve? it would be like a big distributed computing anti-spam project.. then if we were able to make the filters useable by sendmail to block at the server...

    I'm almost thinking a distributed and automated anti-spam system like that could completely crush the spam problem within a 12 month period.

    or I may be completely out of my mind.
  • Not impressed (Score:4, Interesting)

    by macdaddy ( 38372 ) on Thursday November 14, 2002 @02:35PM (#4670239) Homepage Journal
    Well, ok I am impressed that Mozilla is implementing spam filtering abilities in their MUA. I AM NOT impressed with Bayesian spam filters AT ALL. I've been using Mac OS X's Mail.app since I switched to OS X. It's not my primary MUA but I am letting it POP out a copy of all my mail and "learn" from it. It does a pretty good job of finding maybe 80% of the spam I get. However it has a BAD false-positive rate. I mean hell its been flagging CERT advisories as spam. That kind of crap is really annoying. It's flagged co-workers' mail as spam numerous times (and even though I happen to agree... :) ). The biggest problem I have with Bayesian as a mail admin is that I am constantly dealing with spam. Users forward it to me. I receive a number of spam bounces. I work in spam all that damned time. That's the problem. I need a MUA with Bayesian filters that are smart enough for me to tell them to ignore all mail from certain domains or that went to certain accounts. All of the Bayesian filters built into MUAs I've worked with so far can't do things like that. It's really annoying given the position that I'm in.
    • Re:Not impressed (Score:4, Interesting)

      by tbmaddux ( 145207 ) on Thursday November 14, 2002 @04:50PM (#4671759) Homepage Journal
      However it has a BAD false-positive rate. I mean hell its been flagging CERT advisories as spam. That kind of crap is really annoying. It's flagged co-workers' mail as spam numerous times..
      I had this problem early-on as well. I fixed it by marking the false positives as "Not Junk." You can do these even when it's in "Automatic" mode as opposed to "Training." All the "Automatic" does is enable the filter that send the marked messages to the "Junk" folder.

      But it still learns in either mode! Early on my shipping notices from Amazon.com (and even Apple.com, ha ha) were being flagged as Junk, but not anymore. I think it's great and will only improve with time, with others' caveats about client-side email spam checking being flawed noted.

  • Emacs! (Score:4, Interesting)

    by MosesJones ( 55544 ) on Thursday November 14, 2002 @02:36PM (#4670245) Homepage

    This is something that Emacs has in the GNUS client, you score emails up and down and it starts adding filtering rules. Using LISP you could extend this to do some pretty funky moderating.

    Every problem is reducable to a previously solved problem or by definition is unsolveable - Church Turing Thesis.

  • by TigerTime ( 626140 ) on Thursday November 14, 2002 @02:36PM (#4670252)
    There needs to be a tiered structure with filters. The main one would be at the ISP level. It would only filter out obvious spam(like spam going to 2000 users at that ISP). The second tier would be at the client side and would have a certain level of intelligence in identifying spam. One feature that I'd like (it might already be available) is if it could automatically send an email back to the sender saying the email address doesn't exist. This should be done at the server level and/or client level. This could possibly help in removing your email from such lists. As far as what to do with the spam at the client level, I think that it should be sent to your main inbox but just marked as spam (maybe greyed out or something). Like new mail is always bold and once you read it it goes to a regular font. Well, spam could be just greyed out. That way you would ever miss something that the spam filter had a false hit on.
  • SpamCop! (Score:3, Insightful)

    by JediTrainer ( 314273 ) on Thursday November 14, 2002 @02:38PM (#4670271)
    How about a spamcop-like plugin? Or something that can submit my message plus contents to SpamCop?

    If using SpamCop, there should be a way to still show the site's banners, because they deserve to get paid for their bandwidth I'm using up.

    I'd love to just be able to right-click on a message and report it to the various abuse/postmaster accounts without having to copy my whole message plus headers, and pasting such into their web form. SpamCop seems to be pretty good at tracing the origins of messages, so I'd love to be able to leverage that sort of functionality.
  • by krappie ( 172561 ) on Thursday November 14, 2002 @02:47PM (#4670351)
    I personally dont really care about all the junk emails I get. I dont get that many, and I can pretty much tell without looking at them. They go straight to /dev/null.

    Spam is such a horrible thing though. I work at a webhosting company. Im the one that has to track down the site with the old formmail.pl, removing 'aol.com' and 'yahoo.com' from the hosts to relay for, trying to find out who the hell added them so I can murder them. Im the one clearing out the mail queue with 100,000 mails. Im the one clearing the mail queues of people who thought it was a good idea to check the 'open relay' option in plesk. Im the one that has to deal with people bitching about how their mail isnt working or didnt get through.

    Just the other day, I had a raq2 where someone had apparantly put yahoo.com and excite.com in the hosts to relay for. Yay! Thats what attracted the spammers. Now I get a request every second to send mail to 50 people at once. Now that I've removed them, none of them are getting through. But its a raq2, 133 mhz. It has to go through all 50 addresses and say 'relaying denied' and log it. It cant keep up! syslogd is taking up all the cpu and logging things from hours ago because its behind. Quickly, sendmail quits listening on port 25 (but the spam attempts keep coming somehow).

    So I get the idea to block their ips, they seem to be using the same ips. But oh guess what, they're using open proxies and have about 400 ips. Well, I did this for about 5 hours, writing scripts to grab the repeated ips out of the maillog, adding them all to my sendmail access lists. Now every time they try to send mail, it blocks them instead of saying relaying denied 50 times for each request. But a minute later, I get a few new ips and it starts all over again. I have an access list about 6 pages long. Its doing ok, blocking about 90% of them, but every once in a while, they get a new ip and sendmail is brought to a stop.

    Oh yeah, and my /var/ partition is only 200MB, 50mb free. And the maillog is growing at about 10mb a day. So now Im babysitting this server every day until the spam attempts stop. I dont think theres any way around it unless I get sendmail to check for open proxies. But I dont know how to do that, and I dont think they trust me enough to make such changes to sendmail.

    So oh well, mail is getting lost every day on this server and its been renderred horribly slow for its users.. just because some moron noticed it would send some emails for him and started up his scripts.

    Spam causes so many problems on the server level. Its what is making mail an unreliable service. I could care less about spam filters on my mail client. These are the things that make spam evil!
  • Real spam control.. (Score:3, Interesting)

    by grub ( 11606 ) <slashdot@grub.net> on Thursday November 14, 2002 @03:00PM (#4670513) Homepage Journal

    .. should start at the server preventing the offending mail from ever coming into the network in the first place.

    Not that localized spam filters are a bad thing (they aren't!) but refusing connections from known spammer IPs and the proper use of blacklists would cut down on a lot of the email traffic. Once the spam is in your inbox, its just an annoyance to you. The cost to the net has already been incurred.
  • by Aquillion ( 539148 ) on Thursday November 14, 2002 @03:00PM (#4670514)
    "...good morning, Dave. You have recieved spam again. I have been analyzing the spammer's patterns, and I believe I have figured out the most efficent way to protect humans from the harm of spam while adhering as closely to the First Law as possible. To protect them from spam, humans must be pushed. They must go down the stairs. Please go stand by the stairs, so I can protect you."
  • by Futurepower(R) ( 558542 ) on Thursday November 14, 2002 @03:04PM (#4670571) Homepage

    Software that only does mail filtering encourages spammers. The technically knowledgeable people don't get spam, so they stop worrying about it.

    All mail filters should also use a service like SpamCop [spamcop.net], so that the spammers lose their internet service accounts as the spam is filtered.

    I send Spamcop all my spam. Spamcop analyzes it automatically and sends a message to the Internet Service Provider. I use the free Reporting only [spamcop.net] service.
  • by mshiltonj ( 220311 ) <mshiltonjNO@SPAMgmail.com> on Thursday November 14, 2002 @03:17PM (#4670741) Homepage Journal
    I may drop Evolution in favor of Mozilla Mail.

    I tried to find out if the Evolution dev team was going to do this. The only thread I could find on the topic is here:

    http://lists.helixcode.com/archives/public/evoluti on/2002-August/020845.html [helixcode.com]

    Doesn't look like it's part of their vision.
  • by pneuma_66 ( 1830 ) on Thursday November 14, 2002 @03:18PM (#4670753)
    I love mozilla, and use it as my main browser. However my biggest complaint is that all the components (browser, mail, composer, etc) should be separate apps. I don't like the fact that if my browser crashes, so does my email reader, and vice versa.

    I tried to find some documentation on how to acheive this, however, there was none to be found. Does anyone know how to do this, the I can use Mozilla's mail, rather than the flaky mail app that comes with OSX.
    • There are people working on this. Currently, Phoenix [mozilla.org] is the brower only app. It's lean, quick, and efficient. Bugs are still being worked out, but it's very usable right now. Also, K-Meleon [kmeleon.org] is a browser that uses the Gecko [mozilla.org] rendering engine, but not the Mozilla XUL interface.

      As for email/news clients, there are two, I believe. Thunderbird [mozillazine.org] and Minotaur [mozilla.org]. Neither are out at all yet to use.
  • tmda.net? (Score:3, Interesting)

    by Sludge ( 1234 ) <[gro.dessot] [ta] [todhsals]> on Thursday November 14, 2002 @03:27PM (#4670840) Homepage
    Has anyone tried Tagged Message Delivery Agent [tmda.net] out? I would be curious to hear the mileage of others who have tried this.

    Essentially, it throws the parsing problem right back in the spammer's faces: They must answer a fuzzy logic question in order to get into your inbox once and for all. It is similar to challenge/response routines in network connection code to prevent spoofing. The most interesting part from the intro:

    The way TMDA thwarts incoming junk-mail is simple yet extremely effective. You maintain a "whitelist" of trusted contacts which are allowed directly into your mailbox. Messages from unknown senders are held in a pending queue until they respond to a confirmation request sent by TMDA. Once they respond to the confirmation, their original message is deemed legitimate and is delivered to you.

    Bayesian filters to me, seem to work if you are a dull person without many changes in your life. For ex, if you constantly get spams with the word Madam in it and you later on get a sex change, you will need to recalibrate your filters. (Probably not the most pressing thing on your mind, so you'd lose a few authentic mails.)

    Just some thoughts.

  • by Krellan ( 107440 ) <krellan@NOspAm.krellan.com> on Thursday November 14, 2002 @03:38PM (#4670963) Homepage Journal

    It seems too many people distrust spam filters because of the chance of accidentally blocking an important legitimate message as if it were spam.

    Many spam filters are strictly binary: a message is either spam, or not spam. This is not ideal, because "gray area" messages - between these two extremes - will likely not be sorted correctly.

    I propose adding a new sort option to email clients.

    Sort by Spam Probability

    This would be an additional field that can be displayed in a message list, similiar to "To", "From", "Subject", and the like. Like the article [paulgraham.com], probabilities would range from 99% (almost certain spam) to 1% (most likely an innocent message). Notice that 100% accuracy either way is not claimed.

    This way, the user can see up front the messages that are most likely not spam. The spam messages will be relegated to the bottom of the list, possibly colored to indicate their likelihood of being spam. If there is a message in the "gray area", it will most likely appear in the list between the legitimate messages and the spam, so the user will have a chance to see the message and make a decision, without the message being lost in the shuffle.

    This would be a great feature. I hope this gets into Mozilla's mail client.

    (BTW, another feature that would be great to see in mail clients would be datestamping of the actual time the message was downloaded. Many spammers, and innocent people with misconfigured clocks, send emails with wild dates that are not to be trusted. You can see this in yearly archives of GNU "mailman" mailing lists! Datestamping emails as they are downloaded will also keep mailboxes in order when sorted by date, as newly arrived messages will always be at the bottom, instead of being scattered throughout the inbox. But sorting by spam probability will probably become more popular than sorting by date....)

  • by DuSTman31 ( 578936 ) on Thursday November 14, 2002 @03:50PM (#4671092)

    As a popfile user, I'm quite impressed with the catch rate possible with bayes theorem spam filters, however I suspect this will decrease in effectiveness over the long term.

    Spammers are likely to respond to filters like this by encoding text in ways the filters can't read but humans can (eg having a .gif file of the text, loaded by a HTML statement in the message).

    Statistical filters would need to have some kind of built in OCR routine before it could be effective against that trick, and some respectible mailing lists are using images as well, so you can't just filter all mails with images attatched.

    In the long term, therefore, I suspect that filters that use a network database of spam will be more successful.

  • by Micah ( 278 ) on Thursday November 14, 2002 @04:12PM (#4671358) Homepage Journal
    The big problem with this is spam still gets to the server. :(

    Just thought of this now... but it seems like almost all spam these days contains a whole bunch of HTML tags. Maybe someone should write a server plugin to instantly reject all mail containing , instantly adding the sending IP to a iptables DROP rule.

    There's little legitimate e-mail with tables, unless you count paypal, datek, and travelocity news and that kind of crap. But we could always add a list of "good" IPs.

    I know there are server solutions, but all make me a bit queasy. I just want something that will detect funky activity on the fly and instantly deny all access to that IP.
  • by unorthod0x ( 263821 ) on Thursday November 14, 2002 @05:12PM (#4671947)
    After collecting 87 megs worth of spam and a similar amount of non-spam I decided to implement the so-called 'Bayesian' method of spam filtering by way of popfile [sourceforge.net] - it's a pretty slick concept; Perl code that acts as a POP3 server on your own machine - simply drop your collected spam and non-spam in to the appropriate bucket, have popfile go through them and create its indices and set up your mail client to connect to 127.0.0.1 with your username being 'my.pop.server:loginname'.

    I know I've got a particularily difficult task for this filtering technique; I get an awful lot of spam that comes in every day (~100 messages per 24 hour period), some of it I actually want (I run an underground music site, and in some cases I subscribe to opt-in lists that result in something that looks like spam), the rest I could care less about.

    My results have been decent for the most part; 100% of my spam ends up in my Spam folder, however there is a handful of messages that I wish to keep that end up there as well.. For the most part they are the above-mentioned 'borderline' pieces of spam (which I have been careful to put aside and have indexed by popfile anyway), I can only hope that more time and samples will yield better results. I was however surprised to find that some of the e-mails I was getting from friends were falling in to the Spam mailbox anyway; after taking a closer look, I can see why, they use an awful lot of otherwise unmentionable words - but my suspicion that I haven't gotten enough of these 'good-emails-with-bad-words' to make the filtering truly effective.

    Nonetheless, it is nice to have all of my spams seemingly guaranteed to drop in to my "Spam" folder, but my usual task of manually filtering messages that made it past my existing filters in to my Spam folder has been replaced with a different (albeit quicker) task; taking messages out of my spam folder and putting them where they really belong.

    Bottom-line: I still have to visually scan through my mail for legitimate messages amongst the thicket of items informing me about the exciting exploits of women at the farm, wonderful business opportunities from Nigeria and suggestions that I should buy Viagra by the boatload.. all this despite having collected a well organized and rather large collection of spam/non-spam mails. I'll stick with it for a while as I'd like to try it out and give it a proper chance, but I suspect that if you're in a similar situation then you should be prepared to tough it out..
  • by Maul ( 83993 ) on Thursday November 14, 2002 @06:28PM (#4672642) Journal
    I like the ability to block images from a server, but it'd also be nice to have a similar feature for plugins and Java applets.

    A lot of ad companies are now using really annoying flash. Blocking images doesn't stop these.

Anyone can make an omelet with eggs. The trick is to make one with none.

Working...