I recommend altering the sampling spot & frequency, once the frequency of mails start rising to a rather high level, take a sample, and thrash the rest. If required, repeat over a period of at least 3 days to manage the lag & noise. Oversampling could yield erraneous results and could lead to segmentation of the FD community.
----- Original Message ----- From: "Steve Lord" <[EMAIL PROTECTED]> To: "Anders B Jansson" <[EMAIL PROTECTED]> Cc: <full-disclosure@lists.grok.org.uk> Sent: Tuesday, September 16, 2008 7:55 AM Subject: Re: [Full-disclosure] [RFC] Very Low Signal to Noise Ratio on FD > Anders B Jansson wrote: >> Od Orf wrote: >>> On a personal level, I have tried in the past to filter out posts >>> which fail to meet certain criteria using both blacklists and >>> whitelists of content keywords. I've found these to be ineffective in >> Just filter out all messages with the phrase "n3td3v" in adress, subject >> or >> body and you'll get very close to a functional FD list. >> >> A large majority of the noise is either from, replying to or mentioning >> that keyword. > > You'd be amazed at how good that works. Even just filtering n3td3v's > comments allows you to watch the drama unfold through the responses, > something I'm sure many find more entertaining than the source. > > -- > Steve Lord > Mandalorian Security Services > > Get the latest Information Security News at > Infosec Update: http://news.mandalorian.com > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
