Re: 20_sought_fraud.cf

2014-05-22 Thread psychobyte 

Great!  Will do and Thx.

On 05/22/2014 12:13 PM, Kevin A. McGrail wrote:

On 5/20/2014 3:03 PM, psychobyte wrote:

Hi,

Has there been any progress on this? We are looking to integrate 
these rules but, won't bother if the project is abandoned.


Thanks,
There has been some progress, yes but it's taken a back seat a bit.  
It's not abandoned.  Ping the list in 2 weeks.


regards,
KAM

Re: 20_sought_fraud.cf

2014-05-22 Thread Kevin A. McGrail 

On 5/20/2014 3:03 PM, psychobyte wrote:

Hi,

Has there been any progress on this? We are looking to integrate these 
rules but, won't bother if the project is abandoned.


Thanks,
There has been some progress, yes but it's taken a back seat a bit. It's 
not abandoned.  Ping the list in 2 weeks.


regards,
KAM

Re: 20_sought_fraud.cf

2014-05-20 Thread psychobyte 

Hi,

Has there been any progress on this? We are looking to integrate these 
rules but, won't bother if the project is abandoned.


Thanks,

On 03/10/2014 04:42 AM, Justin Mason wrote:


On Sat, Mar 8, 2014 at 9:31 PM, John Hardin > wrote:


Justin, can you provide any enlightenment? If the base Sought
dynamic ruleset is indeed dead, can the wiki page be updated?


hi folks --

I've been in contact with some of the dev team regarding handing over 
the sought ruleset backends… it's not so much dead as in the process 
of resurrection.  perhaps they can comment ;)


--j.

Re: 20_sought_fraud.cf

2014-03-10 Thread Justin Mason 
On Sat, Mar 8, 2014 at 9:31 PM, John Hardin  wrote:

> Justin, can you provide any enlightenment? If the base Sought dynamic
> ruleset is indeed dead, can the wiki page be updated?
>

hi folks --

I've been in contact with some of the dev team regarding handing over the
sought ruleset backends… it's not so much dead as in the process of
resurrection.  perhaps they can comment ;)

--j.

Re: 20_sought_fraud.cf

2014-03-08 Thread John Hardin 

On Fri, 12 Apr 2013, Justin Mason wrote:


it could be that whoever was uploading the fraud corpora which the
ruleset builds from is no longer doing so.  I'll take a look later
on...

--j.

On Fri, Apr 12, 2013 at 12:25 PM, Benny Pedersen  wrote:

Axb skrev den 2013-04-12 10:17:


all I'm seeing in that file is

meta JM_SOUGHT_1   (0)
score JM_SOUGHT_1  0
describe JM_SOUGHT_1  Body contains frequently-spammed text patterns


yep seen here, would like to know why aswell


Sorry to revive a thread that's been quiet for nearly a year, but...

(1) the question about why the base Sought rules were not generating was 
never answered, and


(2) it's apparently been a month since the Sought Fraud rules have been 
updated.


I suspect (2) is a result of the changes to the SA systems around the time 
3.4.0 was released, but that doesn't explain (1).


Justin, can you provide any enlightenment? If the base Sought dynamic 
ruleset is indeed dead, can the wiki page be updated?


I do know that I continue to regularly update my part of the sought-fraud 
corpora.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Failure to plan ahead on someone else's part does not constitute
  an emergency on my part. -- David W. Barts in a.s.r
---
 Tomorrow: Daylight Saving Time begins in U.S. - Spring Forward

Re: 20_sought_fraud.cf

2013-04-12 Thread John Hardin 

On Fri, 12 Apr 2013, Justin Mason wrote:


it could be that whoever was uploading the fraud corpora which the
ruleset builds from is no longer doing so.  I'll take a look later
on...

--j.


I'm still doing so every few days. I seem to get a constant stream of 419 
spams for some reason.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Judicial Activism (n): interpreting the Constitution to grant the
  government powers that are popularly felt to be "needed" but that
  are not explicitly provided for therein (common definition);
  interpreting the Constitution as it is written (Brady definition)
---
 Tomorrow: Thomas Jefferson's 270th Birthday

Re: 20_sought_fraud.cf

2013-04-12 Thread Axb 

Hi Justin
(long time no read!)

My bad - 20_sought_fraud.cf is updating ok.

It's the generic 20_sought.cf file which is not being created.

Thanks so much for looking into this


On 04/12/2013 02:50 PM, Justin Mason wrote:

it could be that whoever was uploading the fraud corpora which the
ruleset builds from is no longer doing so.  I'll take a look later
on...

--j.

On Fri, Apr 12, 2013 at 12:25 PM, Benny Pedersen  wrote:

Axb skrev den 2013-04-12 10:17:



all I'm seeing in that file is

meta JM_SOUGHT_1   (0)
score JM_SOUGHT_1  0
describe JM_SOUGHT_1  Body contains frequently-spammed text patterns



yep seen here, would like to know why aswell

--
senders that put my email into body content will deliver it to my own
trashcan, so if you like to get reply, dont do it

Re: 20_sought_fraud.cf

2013-04-12 Thread Justin Mason 
it could be that whoever was uploading the fraud corpora which the
ruleset builds from is no longer doing so.  I'll take a look later
on...

--j.

On Fri, Apr 12, 2013 at 12:25 PM, Benny Pedersen  wrote:
> Axb skrev den 2013-04-12 10:17:
>
>
>> all I'm seeing in that file is
>>
>> meta JM_SOUGHT_1   (0)
>> score JM_SOUGHT_1  0
>> describe JM_SOUGHT_1  Body contains frequently-spammed text patterns
>
>
> yep seen here, would like to know why aswell
>
> --
> senders that put my email into body content will deliver it to my own
> trashcan, so if you like to get reply, dont do it

Re: 20_sought_fraud.cf

2013-04-12 Thread Benny Pedersen 

Axb skrev den 2013-04-12 10:17:


all I'm seeing in that file is

meta JM_SOUGHT_1   (0)
score JM_SOUGHT_1  0
describe JM_SOUGHT_1  Body contains frequently-spammed text patterns


yep seen here, would like to know why aswell

--
senders that put my email into body content will deliver it to my own 
trashcan, so if you like to get reply, dont do it

20_sought_fraud.cf

2013-04-12 Thread Axb 

Has anybody seen a recent update of 20_sought_fraud.cf ?


all I'm seeing in that file is

meta JM_SOUGHT_1   (0)
score JM_SOUGHT_1  0
describe JM_SOUGHT_1  Body contains frequently-spammed text patterns