On Fri, 28 Aug 2026, Kenneth Porter wrote:
I got a couple of false positives while registering an account. Is there a
place I can submit them?
As Bill noted, bugzilla is a possibility, but historically problems with
rule FPs have not been considered code bugs unless the rule is actually
just executing a Perl method.
URI_PHISH is one of mine.
Basically it's "has a URI and has content that looks like phishing" plus
some exclusions (as Bill noted). The S/O in masscheck is 0.982, which is
"pretty good", but it's high-scoring so FPs are more painful. I can reduce
the score limit but that will take a while to take effect; an actual rule
change (to narrow what "looks like phishing" or to add another exclusion)
would publish much faster.
If you are willing to privately send me a FP sample with as little
redaction as possible I will keep it confidential and figure out why it's
firing.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
How can you reason with someone who thinks we're on a glidepath to
a police state and yet their solution is to grant the government a
monopoly on force? They are insane.
-----------------------------------------------------------------------
684 days since SpaceX caught the SuperHeavy booster on the first try
