On Sat, 24 Jun 2006, Philip Prindeville wrote:

> the text and the images.  The spammers send multipart/alternative
> because they want the text/plain section to confuse the Bayes
> filters, since they know it won't be rendered...

It seems to me that right there is the spam sign you should be looking
for, then, and save all the heavy-duty mathematical analysis of the
images themselves.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]    FALaholic #11174    pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  ...every time I sit down in front of a Windows machine I feel as
  if the computer is just a place for the manufacturers to put their
  advertising.                              -- fwadling on Y! SCOX
----------------------------------------------------------------------

Reply via email to