Re: Request For Email Scam Detection Enhancement

2013-09-10 Thread EE

Philip Taylor wrote:



EE  wrote:


That item is checked.   I still never see any warnings.


Perhaps you never received anything that Seamonkey classes as
a scam.  If you care to post your real e-mail address, I can
forward you something that Seamonkey false-detects as a scam
on my machine (the regular mailing from Flyertalk.com).

Philip Taylor

It does not matter that much.  I can identify scams easily enough 
(usually just from the subject line).  The scam identifier has the 
reputation of not working well.


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-10 Thread Paul B. Gallagher

MCBastos wrote:


FWIW, I believe that the thing that triggers the "possible scam" warning
in Thunderbird/Seamonkey is this:

- A piece of text which appears to be an URL
- Which links to a DIFFERENT URL

Like this:http://www.maliciousite.com/installvirus.php";>http://www.fluffybunnies.com/winaprize/



Yes, that's what I proposed two days ago:

 Original Message ----
Subject: Re: Request For Email Scam Detection Enhancement
Date: Sun, 08 Sep 2013 18:56:05 -0400
From: Paul B. Gallagher 
Newsgroups: mozilla.support.seamonkey
References: <3zkdntqejjmg4bhpnz2dnuvz_swdn...@mozilla.org> 
 



...

The obvious feature would be if it contains a link whose display URL
does not match its target URL.



--
War doesn't determine who's right, just who's left.
--
Paul B. Gallagher

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-10 Thread MCBastos
Interviewed by CNN on 09/09/2013 19:10, Rob told the world:

> Apparently the mails sent by Flyertalk.com do contain the deceiving
> links that SeaMonkey classifies as "likely scam".
> 
> I don't know what kind of mails Flyertalk.com is sending, but when
> it is some service that has user accounts and is vulnerable to phishing,
> you do not want a whitelist based on sender Flyertalk.com because that
> would mean anyone can send messages "from Flyertalk.com" and they would
> never be marked as scam.

FWIW, I believe that the thing that triggers the "possible scam" warning
in Thunderbird/Seamonkey is this:

- A piece of text which appears to be an URL
- Which links to a DIFFERENT URL

Like this:http://www.maliciousite.com/installvirus.php";>http://www.fluffybunnies.com/winaprize/

-- 
MCBastos

This message has been protected with the 2ROT13 algorithm. Unauthorized
use will be prosecuted under the DMCA.

-=-=-
... Sent from my wrist radio.
* Added by TagZilla 0.7a1 running on Seamonkey 2.20 *
Get it at http://xsidebar.mozdev.org/modifiedmailnews.html#tagzilla
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread Rob
Philip Taylor  wrote:
>
>
> Rob wrote:
>
>> This would not work for scam mail, as the objective for a scam mail
>> it to look like a genuine mail but still deceive the user.
>> 
>> Scammers copy genuine mails from banks and other companies and edit
>> them as little as possible.  There is too much probability that they
>> would not be recognized as a scam after a user has whitelisted mails
>> from the company.
>> 
>> This is different from spam, where you are looking for mails different
>> from usual mail, rather than mail that looks the same.
>
> But when you have 100% of e-mails from Flyertalk.com being marked
> as scams, and 0% are scams, then the software needs to be intelligent
> enough to recognise this.  We are not discussing borderline situations
> where some messages are scams and some are not; this is a 100%
> false positive situation that requires adaptive learning in order
> to resolve the problem.

Apparently the mails sent by Flyertalk.com do contain the deceiving
links that SeaMonkey classifies as "likely scam".

I don't know what kind of mails Flyertalk.com is sending, but when
it is some service that has user accounts and is vulnerable to phishing,
you do not want a whitelist based on sender Flyertalk.com because that
would mean anyone can send messages "from Flyertalk.com" and they would
never be marked as scam.

When you don't care about that, just disable the scam detection.
After all, it is just an extra service.  When it annoys you, you
can turn it off.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread Philip Taylor


Rob wrote:

> This would not work for scam mail, as the objective for a scam mail
> it to look like a genuine mail but still deceive the user.
> 
> Scammers copy genuine mails from banks and other companies and edit
> them as little as possible.  There is too much probability that they
> would not be recognized as a scam after a user has whitelisted mails
> from the company.
> 
> This is different from spam, where you are looking for mails different
> from usual mail, rather than mail that looks the same.

But when you have 100% of e-mails from Flyertalk.com being marked
as scams, and 0% are scams, then the software needs to be intelligent
enough to recognise this.  We are not discussing borderline situations
where some messages are scams and some are not; this is a 100%
false positive situation that requires adaptive learning in order
to resolve the problem.

Philip Taylor
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread PhillipJones

Philip Taylor wrote:



Rob  wrote:


SeaMonkey has no way to see that an e-mail is "the same as one that
you have seen before".  That probably is not true, anyway.

So your ooptions are to disable the detector or to live with it.


Rob, it is a fundamental feature of good software design that
software should adapt to the needs of the user; the user should
never have to adapt to the needs of the software.

Philip Taylor

Tell that to Mozilla Developers, be it SeaMonkey, FireFox, or 
Thunderbird. I've been trying to get that point across to developers for 
years but just flip me the bird go back litlle man you don't know what 
your talking about.


--
Phillip M. Jones, C.E.T.  "If it's Fixed, Don't Break it"
http://www.phillipmjones.netmailto:pjones...@comcast.net
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread PhillipJones

Rob wrote:

Philip Taylor  wrote:



Rob  wrote:


SeaMonkey has no way to see that an e-mail is "the same as one that
you have seen before".  That probably is not true, anyway.

So your ooptions are to disable the detector or to live with it.


Rob, it is a fundamental feature of good software design that
software should adapt to the needs of the user; the user should
never have to adapt to the needs of the software.

Philip Taylor


Yes, but in this case that is not a simple task.
The user says "this is an e-mail I have seen before, it should not
be detected as a scam".
But what properties of the mail do you want to store in a whitelist?

Certainly not the sender address, as it can very easily be spoofed.
Anyone sending a genuine-looking phishing mail will try to use the
usual sender address of the company they want to phish data for.
So, whitelisting on sender address would be an extremely bad idea!

You can store a hash of the message to whitelist it, but I bet that
the messages the user is talking about are not "the same".  They
are messages from the same company that have the same general layout,
but their content is not the same.

So what would the software have to store and match to identify "the same"
messages that it should not classify as scam the next time?

It will not be easy...



how about instead of using a white list use a Black list whatever the 
user marks as spam. If its not corrected within a week, Make it a 
Permanent forever or at least 100 years block.


--
Phillip M. Jones, C.E.T.  "If it's Fixed, Don't Break it"
http://www.phillipmjones.netmailto:pjones...@comcast.net
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread Rob
Philip Taylor  wrote:
>
>
> Rob wrote:
>
>> Yes, but in this case that is not a simple task.
>> The user says "this is an e-mail I have seen before, it should not
>> be detected as a scam".
>> But what properties of the mail do you want to store in a whitelist?
>> 
>> Certainly not the sender address, as it can very easily be spoofed.
>> Anyone sending a genuine-looking phishing mail will try to use the
>> usual sender address of the company they want to phish data for.
>> So, whitelisting on sender address would be an extremely bad idea!
>> 
>> You can store a hash of the message to whitelist it, but I bet that
>> the messages the user is talking about are not "the same".  They
>> are messages from the same company that have the same general layout,
>> but their content is not the same.
>> 
>> So what would the software have to store and match to identify "the same"
>> messages that it should not classify as scam the next time?
>> 
>> It will not be easy...
>
> Agreed, but that is exactly why the science of heuristic analysis
> is so well developed.  Simply saying "If I receive a second identical
> copy of this e-mail, please do not treat it a scam" is totally
> inadequate -- what we need is a feature whereby each time we mark
> an e-mail as /not/ a scam, it is compared with all similar messages
> that have been so marked, and the scam-detection heuristics adjusted
> accordingly.  There is no fundamental difference between the approach
> currently provided for junk mail training and the requested feature
> for scam mail training.

This would not work for scam mail, as the objective for a scam mail
it to look like a genuine mail but still deceive the user.

Scammers copy genuine mails from banks and other companies and edit
them as little as possible.  There is too much probability that they
would not be recognized as a scam after a user has whitelisted mails
from the company.

This is different from spam, where you are looking for mails different
from usual mail, rather than mail that looks the same.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread Philip Taylor


EE  wrote:

> That item is checked.   I still never see any warnings.

Perhaps you never received anything that Seamonkey classes as
a scam.  If you care to post your real e-mail address, I can
forward you something that Seamonkey false-detects as a scam
on my machine (the regular mailing from Flyertalk.com).

Philip Taylor
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread EE

Arnie Goetchius wrote:

Paul B. Gallagher wrote:

EE wrote:

Arnie Goetchius wrote:

Periodically I receive emails from trusted sources where SM warns that
this email "might be a scam". Clicking on "Not a Scam" makes the message
go away. However, SM does not learn and keeps giving the same warning
for the same trusted source. The quick fix is to completely disable this
feature by going about:config and change mail.phishing.detection.enabled
to False.

It would be helpful if SM could learn when an email is checked as "Not a
Scam", that the result of that action would disable any future notices
that an email from the same source "might be a scam".

Note: Under Global Junk Preferences/Junk and Suspect Mail, I do have
"suspected email scam" unchecked but that apparently is ignored and the
only way to not see these warnings is to do the fix in about:config


I see the opposite.  I have received repeated scam attempts (especially
the Nigerian variety), and never see any warning about a scam.


Edit | Preferences | Mail & Newsgroups | Junk & Suspect Mail

At the bottom:
[x] Tell me if the message I'm reading is a suspected email scam

This should have the same effect as toggling Arnie's key in about:config.



It does not have the same affect so I assume it is broken. The only way
to to toggle it on or off is to use about:config

That does not seem to work very well.  I presume the setting in 
about:config is mail.phishing.detection.enabled, which is already set to 
true.  I have had that setting with both Thunderbird and Seamonkey and 
have never received any warnings, even though I have received several 
phishing attempts with both.


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread EE

Paul B. Gallagher wrote:

EE wrote:

Arnie Goetchius wrote:

Periodically I receive emails from trusted sources where SM warns that
this email "might be a scam". Clicking on "Not a Scam" makes the message
go away. However, SM does not learn and keeps giving the same warning
for the same trusted source. The quick fix is to completely disable this
feature by going about:config and change mail.phishing.detection.enabled
to False.

It would be helpful if SM could learn when an email is checked as "Not a
Scam", that the result of that action would disable any future notices
that an email from the same source "might be a scam".

Note: Under Global Junk Preferences/Junk and Suspect Mail, I do have
"suspected email scam" unchecked but that apparently is ignored and the
only way to not see these warnings is to do the fix in about:config


I see the opposite.  I have received repeated scam attempts (especially
the Nigerian variety), and never see any warning about a scam.


Edit | Preferences | Mail & Newsgroups | Junk & Suspect Mail

At the bottom:
[x] Tell me if the message I'm reading is a suspected email scam

This should have the same effect as toggling Arnie's key in about:config.



That item is checked.   I still never see any warnings.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread Philip Taylor


Rob wrote:

> Yes, but in this case that is not a simple task.
> The user says "this is an e-mail I have seen before, it should not
> be detected as a scam".
> But what properties of the mail do you want to store in a whitelist?
> 
> Certainly not the sender address, as it can very easily be spoofed.
> Anyone sending a genuine-looking phishing mail will try to use the
> usual sender address of the company they want to phish data for.
> So, whitelisting on sender address would be an extremely bad idea!
> 
> You can store a hash of the message to whitelist it, but I bet that
> the messages the user is talking about are not "the same".  They
> are messages from the same company that have the same general layout,
> but their content is not the same.
> 
> So what would the software have to store and match to identify "the same"
> messages that it should not classify as scam the next time?
> 
> It will not be easy...

Agreed, but that is exactly why the science of heuristic analysis
is so well developed.  Simply saying "If I receive a second identical
copy of this e-mail, please do not treat it a scam" is totally
inadequate -- what we need is a feature whereby each time we mark
an e-mail as /not/ a scam, it is compared with all similar messages
that have been so marked, and the scam-detection heuristics adjusted
accordingly.  There is no fundamental difference between the approach
currently provided for junk mail training and the requested feature
for scam mail training.

Philip Taylor
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread Rob
Philip Taylor  wrote:
>
>
> Rob  wrote:
>
>> SeaMonkey has no way to see that an e-mail is "the same as one that
>> you have seen before".  That probably is not true, anyway.
>> 
>> So your ooptions are to disable the detector or to live with it.
>
> Rob, it is a fundamental feature of good software design that
> software should adapt to the needs of the user; the user should
> never have to adapt to the needs of the software.
>
> Philip Taylor

Yes, but in this case that is not a simple task.
The user says "this is an e-mail I have seen before, it should not
be detected as a scam".
But what properties of the mail do you want to store in a whitelist?

Certainly not the sender address, as it can very easily be spoofed.
Anyone sending a genuine-looking phishing mail will try to use the
usual sender address of the company they want to phish data for.
So, whitelisting on sender address would be an extremely bad idea!

You can store a hash of the message to whitelist it, but I bet that
the messages the user is talking about are not "the same".  They
are messages from the same company that have the same general layout,
but their content is not the same.

So what would the software have to store and match to identify "the same"
messages that it should not classify as scam the next time?

It will not be easy...
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread Philip Taylor


Rob  wrote:

> SeaMonkey has no way to see that an e-mail is "the same as one that
> you have seen before".  That probably is not true, anyway.
> 
> So your ooptions are to disable the detector or to live with it.

Rob, it is a fundamental feature of good software design that
software should adapt to the needs of the user; the user should
never have to adapt to the needs of the software.

Philip Taylor
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread Rob
PhillipJones  wrote:
> Philip Taylor wrote:
>>
>>
>> A Williams wrote:
>>
>>> Why bother?  It is just a warning of a potential threat, if you have a
>>> reason to know better then simply ignore it for that mail.
>>
>> And for the next, and the next, and the next, ad nauseam.
>>
>> As Arnie quite righly says, Seamonkey should learn from user
>> responses when a given sender (e.g., Flyertalk.Com) is not
>> a scam sender but consistently uses (for whatever reason)
>> certain practices (e.g., links to an indirect host such
>> as click.travel.ibemail.com) that consistently trigger
>> the"we think this is scam" behaviour.
>>
>> Philip Taylor
>>
> It also should be able to when an Item is marked as Spam put in a banned 
> for life List where its permanently Blocked forever and not even allow.

That is possible with a message filter.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-09 Thread Rob
Arnie Goetchius  wrote:
> Rob wrote:
>> Arnie Goetchius  wrote:
>>> Periodically I receive emails from trusted sources where SM warns that
>>> this email "might be a scam". Clicking on "Not a Scam" makes the message
>>> go away. However, SM does not learn and keeps giving the same warning
>>> for the same trusted source. The quick fix is to completely disable this
>>> feature by going about:config and change mail.phishing.detection.enabled
>>> to False.
>>>
>>> It would be helpful if SM could learn when an email is checked as "Not a
>>> Scam", that the result of that action would disable any future notices
>>> that an email from the same source "might be a scam".
>> 
>> Seamonkey has no way of reliably determining the source of a mail, so
>> it does not use that information as part of determination if a mail
>> is a scam.
>> 
> Well, it uses something to determine if the email is a scam. If I tell
> SeaMonkey that it is wrong to classify an email as a scam, it ought to
> remember what I said the next time that email shows up and stop giving
> me a scam alert for that email.

SeaMonkey has no way to see that an e-mail is "the same as one that
you have seen before".  That probably is not true, anyway.

So your ooptions are to disable the detector or to live with it.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread MCBastos
Interviewed by CNN on 08/09/2013 10:31, Arnie Goetchius told the world:
> Periodically I receive emails from trusted sources where SM warns that
> this email "might be a scam". Clicking on "Not a Scam" makes the message
> go away. However, SM does not learn and keeps giving the same warning
> for the same trusted source. The quick fix is to completely disable this
> feature by going about:config and change mail.phishing.detection.enabled
> to False.
> 
> It would be helpful if SM could learn when an email is checked as "Not a
> Scam", that the result of that action would disable any future notices
> that an email from the same source "might be a scam".
> 
> Note: Under Global Junk Preferences/Junk and Suspect Mail, I do have
> "suspected email scam" unchecked but that apparently is ignored and the
> only way to not see these warnings is to do the fix in about:config
> 

I do believe it makes some difference if the sender's e-mail address is
in your contact book.

-- 
MCBastos

This message has been protected with the 2ROT13 algorithm. Unauthorized
use will be prosecuted under the DMCA.

-=-=-
... Sent from my Strawberry.
* Added by TagZilla 0.7a1 running on Seamonkey 2.20 *
Get it at http://xsidebar.mozdev.org/modifiedmailnews.html#tagzilla
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread PhillipJones

Philip Taylor wrote:



A Williams wrote:


Why bother?  It is just a warning of a potential threat, if you have a
reason to know better then simply ignore it for that mail.


And for the next, and the next, and the next, ad nauseam.

As Arnie quite righly says, Seamonkey should learn from user
responses when a given sender (e.g., Flyertalk.Com) is not
a scam sender but consistently uses (for whatever reason)
certain practices (e.g., links to an indirect host such
as click.travel.ibemail.com) that consistently trigger
the"we think this is scam" behaviour.

Philip Taylor

It also should be able to when an Item is marked as Spam put in a banned 
for life List where its permanently Blocked forever and not even allow.


--
Phillip M. Jones, C.E.T.  "If it's Fixed, Don't Break it"
http://www.phillipmjones.netmailto:pjones...@comcast.net
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread Paul B. Gallagher

Arnie Goetchius wrote:

Rob wrote:

Arnie Goetchius  wrote:

Periodically I receive emails from trusted sources where SM warns that
this email "might be a scam". Clicking on "Not a Scam" makes the message
go away. However, SM does not learn and keeps giving the same warning
for the same trusted source. The quick fix is to completely disable this
feature by going about:config and change mail.phishing.detection.enabled
to False.

It would be helpful if SM could learn when an email is checked as "Not a
Scam", that the result of that action would disable any future notices
that an email from the same source "might be a scam".


Seamonkey has no way of reliably determining the source of a mail, so
it does not use that information as part of determination if a mail
is a scam.


Well, it uses something to determine if the email is a scam. If I tell
SeaMonkey that it is wrong to classify an email as a scam, it ought to
remember what I said the next time that email shows up and stop giving
me a scam alert for that email.


The obvious feature would be if it contains a link whose display URL 
does not match its target URL.


--
War doesn't determine who's right, just who's left.
--
Paul B. Gallagher

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread Paul B. Gallagher

Arnie Goetchius wrote:

Paul B. Gallagher wrote:


Edit | Preferences | Mail & Newsgroups | Junk & Suspect Mail

At the bottom: [x] Tell me if the message I'm reading is a
suspected email scam

This should have the same effect as toggling Arnie's key in
about:config.


It does not have the same effect so I assume it is broken. The only
way to to toggle it on or off is to use about:config


That's weird, it does on my machine.

I opened about:config and filtered on mail.phishing.detection.enabled, 
which returned one key. It was set to the default (true).


I opened the pref I described above, and each time I toggled it and 
clicked "OK," the key in about:config flipped to the opposite value. 
Each time it turned false, it was bolded (user set), and each time it 
turned true, it went back to roman (default).


Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0 
SeaMonkey/2.20


Win7 Pro (64-bit) SP1

--
War doesn't determine who's right, just who's left.
--
Paul B. Gallagher

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread Arnie Goetchius
Paul B. Gallagher wrote:
> EE wrote:
>> Arnie Goetchius wrote:
>>> Periodically I receive emails from trusted sources where SM warns that
>>> this email "might be a scam". Clicking on "Not a Scam" makes the message
>>> go away. However, SM does not learn and keeps giving the same warning
>>> for the same trusted source. The quick fix is to completely disable this
>>> feature by going about:config and change mail.phishing.detection.enabled
>>> to False.
>>>
>>> It would be helpful if SM could learn when an email is checked as "Not a
>>> Scam", that the result of that action would disable any future notices
>>> that an email from the same source "might be a scam".
>>>
>>> Note: Under Global Junk Preferences/Junk and Suspect Mail, I do have
>>> "suspected email scam" unchecked but that apparently is ignored and the
>>> only way to not see these warnings is to do the fix in about:config
>>>
>> I see the opposite.  I have received repeated scam attempts (especially
>> the Nigerian variety), and never see any warning about a scam.
> 
> Edit | Preferences | Mail & Newsgroups | Junk & Suspect Mail
> 
> At the bottom:
> [x] Tell me if the message I'm reading is a suspected email scam
> 
> This should have the same effect as toggling Arnie's key in about:config.
> 
> 
It does not have the same affect so I assume it is broken. The only way
to to toggle it on or off is to use about:config
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread Arnie Goetchius
Rob wrote:
> Arnie Goetchius  wrote:
>> Periodically I receive emails from trusted sources where SM warns that
>> this email "might be a scam". Clicking on "Not a Scam" makes the message
>> go away. However, SM does not learn and keeps giving the same warning
>> for the same trusted source. The quick fix is to completely disable this
>> feature by going about:config and change mail.phishing.detection.enabled
>> to False.
>>
>> It would be helpful if SM could learn when an email is checked as "Not a
>> Scam", that the result of that action would disable any future notices
>> that an email from the same source "might be a scam".
> 
> Seamonkey has no way of reliably determining the source of a mail, so
> it does not use that information as part of determination if a mail
> is a scam.
> 
Well, it uses something to determine if the email is a scam. If I tell
SeaMonkey that it is wrong to classify an email as a scam, it ought to
remember what I said the next time that email shows up and stop giving
me a scam alert for that email.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread Rob
Arnie Goetchius  wrote:
> Periodically I receive emails from trusted sources where SM warns that
> this email "might be a scam". Clicking on "Not a Scam" makes the message
> go away. However, SM does not learn and keeps giving the same warning
> for the same trusted source. The quick fix is to completely disable this
> feature by going about:config and change mail.phishing.detection.enabled
> to False.
>
> It would be helpful if SM could learn when an email is checked as "Not a
> Scam", that the result of that action would disable any future notices
> that an email from the same source "might be a scam".

Seamonkey has no way of reliably determining the source of a mail, so
it does not use that information as part of determination if a mail
is a scam.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread Paul B. Gallagher

EE wrote:

Arnie Goetchius wrote:

Periodically I receive emails from trusted sources where SM warns that
this email "might be a scam". Clicking on "Not a Scam" makes the message
go away. However, SM does not learn and keeps giving the same warning
for the same trusted source. The quick fix is to completely disable this
feature by going about:config and change mail.phishing.detection.enabled
to False.

It would be helpful if SM could learn when an email is checked as "Not a
Scam", that the result of that action would disable any future notices
that an email from the same source "might be a scam".

Note: Under Global Junk Preferences/Junk and Suspect Mail, I do have
"suspected email scam" unchecked but that apparently is ignored and the
only way to not see these warnings is to do the fix in about:config


I see the opposite.  I have received repeated scam attempts (especially
the Nigerian variety), and never see any warning about a scam.


Edit | Preferences | Mail & Newsgroups | Junk & Suspect Mail

At the bottom:
[x] Tell me if the message I'm reading is a suspected email scam

This should have the same effect as toggling Arnie's key in about:config.


--
War doesn't determine who's right, just who's left.
--
Paul B. Gallagher

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread EE

Arnie Goetchius wrote:

Periodically I receive emails from trusted sources where SM warns that
this email "might be a scam". Clicking on "Not a Scam" makes the message
go away. However, SM does not learn and keeps giving the same warning
for the same trusted source. The quick fix is to completely disable this
feature by going about:config and change mail.phishing.detection.enabled
to False.

It would be helpful if SM could learn when an email is checked as "Not a
Scam", that the result of that action would disable any future notices
that an email from the same source "might be a scam".

Note: Under Global Junk Preferences/Junk and Suspect Mail, I do have
"suspected email scam" unchecked but that apparently is ignored and the
only way to not see these warnings is to do the fix in about:config

I see the opposite.  I have received repeated scam attempts (especially 
the Nigerian variety), and never see any warning about a scam.


___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread Philip Taylor


A Williams wrote:

> Why bother?  It is just a warning of a potential threat, if you have a
> reason to know better then simply ignore it for that mail.

And for the next, and the next, and the next, ad nauseam.

As Arnie quite righly says, Seamonkey should learn from user
responses when a given sender (e.g., Flyertalk.Com) is not
a scam sender but consistently uses (for whatever reason)
certain practices (e.g., links to an indirect host such
as click.travel.ibemail.com) that consistently trigger
the"we think this is scam" behaviour.

Philip Taylor
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Request For Email Scam Detection Enhancement

2013-09-08 Thread A Williams

Arnie Goetchius wrote:

Periodically I receive emails from trusted sources where SM warns that
this email "might be a scam". Clicking on "Not a Scam" makes the message
go away. However, SM does not learn and keeps giving the same warning
for the same trusted source. The quick fix is to completely disable this
feature by going about:config and change mail.phishing.detection.enabled
to False.

It would be helpful if SM could learn when an email is checked as "Not a
Scam", that the result of that action would disable any future notices
that an email from the same source "might be a scam".

Note: Under Global Junk Preferences/Junk and Suspect Mail, I do have
"suspected email scam" unchecked but that apparently is ignored and the
only way to not see these warnings is to do the fix in about:config



Why bother?  It is just a warning of a potential threat, if you have a 
reason to know better then simply ignore it for that mail.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey