Just downloaded this morning's set of posts. Got 7 posts but 191 that
my new filter deleted. It's roughtly
message-id:@google-groups (sp? Hyphen? @?)
It deletes everything from googlegroups. I hope no normal person is
trying to post from google groups, because I won't see his post. Maybe
I'll see answers unless everyone else is filtering based on that too.
Or maybe he can post the same things again after the jerk who is
spamming us stops. OTOH, will I actually think to remove my filter when
that time comes? If someone reminds me, yet.
micky wrote:
Just downloaded this morning's set of posts. Got 7 posts but 191 that
my new filter deleted. It's roughtly
message-id:@google-groups (sp? Hyphen? @?)
no hyphen between google and groups, I match on
message-id: contains @googlegroups.com
It deletes everything from googlegroups. I hope no normal person is
trying to post from google groups, because I won't see his post. Maybe I'll see answers unless everyone else is filtering based on that too.
I didn't see anyone in this group that needed whitelisting
micky wrote:
Just downloaded this morning's set of posts. Got 7 posts but 191 that
my new filter deleted. It's roughtly
message-id:@google-groups (sp? Hyphen? @?)
no hyphen between google and groups, I match on
message-id: contains @googlegroups.com
It deletes everything from googlegroups. I hope no normal person is
trying to post from google groups, because I won't see his post. Maybe
I'll see answers unless everyone else is filtering based on that too.
I didn't see anyone in this group that needed whitelisting
Just downloaded this morning's set of posts. Got 7 posts but 191 that
my new filter deleted. It's roughtly
message-id:@google-groups (sp? Hyphen? @?)
It deletes everything from googlegroups. I hope no normal person is
trying to post from google groups, because I won't see his post. Maybe
I'll see answers unless everyone else is filtering based on that too.
Or maybe he can post the same things again after the jerk who is
spamming us stops. OTOH, will I actually think to remove my filter when
that time comes? If someone reminds me, yet.
I didn't see anyone in this group that needed whitelisting
+1 I have a filter that moves all the threads up to the top of the list where someone
posted from Google Groups. There are only two genuine threads in my current list, and on both of those the GG poster was a spammer.
On 04.12.23 14:53, micky wrote:
Just downloaded this morning's set of posts. Got 7 posts but 191 that
my new filter deleted. It's roughtly
message-id:@google-groups (sp? Hyphen? @?)
It deletes everything from googlegroups. I hope no normal person is
trying to post from google groups, because I won't see his post. Maybe
I'll see answers unless everyone else is filtering based on that too.
Or maybe he can post the same things again after the jerk who is
spamming us stops. OTOH, will I actually think to remove my filter when
that time comes? If someone reminds me, yet.
You are our hero!
Committed providers filter them like ES, Solani or Individual.net. Stop
to use these idiot server like @tweaknews.nl and all these anonymous
crap servers and your problems are solved.
For those coming via Google and you want to read create a Whitelist.
Use a real modern usenet-client and not your more than 20 years
unsupported X-Newsreader: Forte Agent 5.00/32.1171.
For those coming via Google and you want to read create a Whitelist.
Use a real modern usenet-client and not your more than 20 years
unsupported X-Newsreader: Forte Agent 5.00/32.1171.
Committed providers filter them like ES, Solani or Individual.net. Stop
I was using ES until, it must have been, some crank reported me for violations I never made. He badmouthed me in newsgroups also. Suddenly
it stopped working, no explanation, no email, and even enrolling under
iirc a different email address was not possible. It's been years and
unless they hold a grudge, I probably could re-enroll now but Tweak is
doing fine.
I was using ES until, it must have been, some crank reported me for violations I never made. He badmouthed me in newsgroups also. Suddenly
it stopped working, no explanation, no email, and even enrolling under
iirc a different email address was not possible. It's been years and
unless they hold a grudge, I probably could re-enroll now but Tweak is
doing fine.
BTW, normally the slogan is "If it ain't Dutch, it ain't much!", but
in this case, the slogan doesn't seem to apply.
micky <NONONOmisc07@fmguy.com> wrote:
[...]
I was using ES until, it must have been, some crank reported me for
violations I never made. He badmouthed me in newsgroups also. Suddenly
it stopped working, no explanation, no email, and even enrolling under
iirc a different email address was not possible. It's been years and
unless they hold a grudge, I probably could re-enroll now but Tweak is
doing fine.
Well, apparently tweaknews.nl is *not* "doing fine", otherwise you
wouldn't be seeing all the Google Groups originating spam you say you're >seeing.
I'll try to be on the lookout for any information from tweaknews.nl in
the abuse and News admin groups. I don't think I've seen anything sofar.
BTW, normally the slogan is "If it ain't Dutch, it ain't much!", but
in this case, the slogan doesn't seem to apply.
[...]
On Mon, 4 Dec 2023 17:42:45 +0100, J๖rg Lorenz fibbed:
For those coming via Google and you want to read create a Whitelist.
Use a real modern usenet-client and not your more than 20 years
unsupported X-Newsreader: Forte Agent 5.00/32.1171.
* Forte Agent 5.00/32.1171 can create white lists.
* Forte Agent 5.00/32.1171 is not even 20 years old yet.
In comp.mobile.android, on 4 Dec 2023 20:27:11 GMT, Frank Slootweg <this@ddress.is.invalid> wrote:
micky <NONONOmisc07@fmguy.com> wrote:
[...]
I was using ES until, it must have been, some crank reported me for
violations I never made. He badmouthed me in newsgroups also. Suddenly
it stopped working, no explanation, no email, and even enrolling under
iirc a different email address was not possible. It's been years and
unless they hold a grudge, I probably could re-enroll now but Tweak is
doing fine.
Well, apparently tweaknews.nl is *not* "doing fine", otherwise you
wouldn't be seeing all the Google Groups originating spam you say you're >seeing.
Not much of a problem. I'm not seeing it anymore. It took me 3 minutes
to read about and add a filter.
I'll try to be on the lookout for any information from tweaknews.nl in
the abuse and News admin groups. I don't think I've seen anything sofar.
BTW, normally the slogan is "If it ain't Dutch, it ain't much!", but
in this case, the slogan doesn't seem to apply.
[...]
Not much of a problem. I'm not seeing it anymore. It took me 3 minutes
to read about and add a filter.
So you pay them *and* do their job for them!? Makes perfect sense, NOT!
Just downloaded this morning's set of posts. Got 7 posts but 191 that
my new filter deleted. It's roughtly
message-id:@google-groups (sp? Hyphen? @?)
It deletes everything from googlegroups. I hope no normal person is
trying to post from google groups, because I won't see his post. Maybe
I'll see answers unless everyone else is filtering based on that too.
Or maybe he can post the same things again after the jerk who is
spamming us stops. OTOH, will I actually think to remove my filter when
that time comes? If someone reminds me, yet.
micky <NONONOmisc07@fmguy.com> wrote:
In comp.mobile.android, on 4 Dec 2023 20:27:11 GMT, Frank Slootweg
<this@ddress.is.invalid> wrote:
micky <NONONOmisc07@fmguy.com> wrote:
[...]
I was using ES until, it must have been, some crank reported me for
violations I never made. He badmouthed me in newsgroups also. Suddenly >> >> it stopped working, no explanation, no email, and even enrolling under
iirc a different email address was not possible. It's been years and
unless they hold a grudge, I probably could re-enroll now but Tweak is
doing fine.
Well, apparently tweaknews.nl is *not* "doing fine", otherwise you
wouldn't be seeing all the Google Groups originating spam you say you're
seeing.
Not much of a problem. I'm not seeing it anymore. It took me 3 minutes
to read about and add a filter.
So you pay them *and* do their job for them!? Makes perfect sense, NOT!
I'll try to be on the lookout for any information from tweaknews.nl in
the abuse and News admin groups. I don't think I've seen anything sofar.
BTW, normally the slogan is "If it ain't Dutch, it ain't much!", but
in this case, the slogan doesn't seem to apply.
[...]
On 2023-12-06 21:22, micky wrote:
Wow, just now 25 real posts and 2600 spam. Thank goodness for filters.
Where? I only saw one or two, in this group at least.
On 06.12.23 21:48, Carlos E. R. wrote:
On 2023-12-06 21:22, micky wrote:
Wow, just now 25 real posts and 2600 spam. Thank goodness for filters.
Where? I only saw one or two, in this group at least.
Don't you understand how it works?
It depends whether your service provider is filtering or not.
My goodness, Carlos!
Wow, just now 25 real posts and 2600 spam. Thank goodness for filters.
Do you really think I didn't know?
On 2023-12-06 22:06, J๖rg Lorenz wrote:
On 06.12.23 21:48, Carlos E. R. wrote:
On 2023-12-06 21:22, micky wrote:
Wow, just now 25 real posts and 2600 spam. Thank goodness for filters. >>Where? I only saw one or two, in this group at least.
Don't you understand how it works?
It depends whether your service provider is filtering or not.
My goodness, Carlos!
Do you really think I didn't know?
You are a fun spoiler.
So if I'm slow in responding, you know why! :-) Just blame Google
(Groups).
Carlos E. R. <robin_listas@es.invalid> wrote:
On 2023-12-06 22:06, Jรถrg Lorenz wrote:
On 06.12.23 21:48, Carlos E. R. wrote:
On 2023-12-06 21:22, micky wrote:
Wow, just now 25 real posts and 2600 spam. Thank goodness for filters. >>>>Where? I only saw one or two, in this group at least.
Don't you understand how it works?
It depends whether your service provider is filtering or not.
My goodness, Carlos!
Do you really think I didn't know?
You are a fun spoiler.
On News.Individual.Net there are big holes in the article number
ranges, i.e. where the spam articles were before they got (locally)
canceled.
For safety reasons, I pull only 50 articles at a time, but because of
the holes, each pull actually pulls only a few or no articles.
Because today my own posts from yesterday appeared, I found out that
my pulls have a backlog of some 2000 (mostly non-existing) articles.
So if I'm slow in responding, you know why! :-) Just blame Google (Groups).
On 2023-12-07 19:01, Frank Slootweg wrote:
Carlos E. R. <robin_listas@es.invalid> wrote:
On 2023-12-06 22:06, J๖rg Lorenz wrote:
On 06.12.23 21:48, Carlos E. R. wrote:
On 2023-12-06 21:22, micky wrote:
Wow, just now 25 real posts and 2600 spam. Thank goodness for filters.
Where? I only saw one or two, in this group at least.
Don't you understand how it works?
It depends whether your service provider is filtering or not.
My goodness, Carlos!
Do you really think I didn't know?
You are a fun spoiler.
On News.Individual.Net there are big holes in the article number
ranges, i.e. where the spam articles were before they got (locally) canceled.
For safety reasons, I pull only 50 articles at a time, but because of the holes, each pull actually pulls only a few or no articles.
Because today my own posts from yesterday appeared, I found out that
my pulls have a backlog of some 2000 (mostly non-existing) articles.
So if I'm slow in responding, you know why! :-) Just blame Google (Groups).
Two or three times, start of day, machine booted or coming from suspend/hibernation, Thunderbird asks for permission to download 3000 headers. But then just a few actually show up.
Maybe TB is just looking at the index number, and as you say, there are holes.
On 2023-12-06 21:22, micky wrote:
Wow, just now 25 real posts and 2600 spam. Thank goodness for filters.
Where? I only saw one or two, in this group at least.
Don't you understand how it works?
It depends whether your service provider is filtering or not.
My goodness, Carlos!
Do you really think I didn't know?
You are a fun spoiler.
On News.Individual.Net there are big holes in the article number
ranges, i.e. where the spam articles were before they got (locally)
canceled.
For safety reasons, I pull only 50 articles at a time, but because of >>> the holes, each pull actually pulls only a few or no articles.
Because today my own posts from yesterday appeared, I found out that
my pulls have a backlog of some 2000 (mostly non-existing) articles.
So if I'm slow in responding, you know why! :-) Just blame Google
(Groups).
Two or three times, start of day, machine booted or coming from
suspend/hibernation, Thunderbird asks for permission to download 3000
headers. But then just a few actually show up.
Maybe TB is just looking at the index number, and as you say, there are
holes.
Trying to load 3000 articles is probably enough. Over the past few
days, I've seen article number deltas of some 2000 per day.
A newsreader can only ask for headers by article numbers, because
while it does know past article numbers (and so can ask for the next
ones), it does not know the message-ids of the next ones (because the message-ids are in the headers which it still has to fetch).
So the newsreader only gets the headers for the articles which
actually exist, not for the (spam) articles which have been (locally) canceled by the news server.
So your 3000 headers at a time works for you.
I OTOH have to do it bit by bit, because my local news server
(Hamster) does the fetching of headers and articles and I do not want to
risk loading *other* (than this GG) 'spam', because I keep my groups 'forever' (currently upto some 20 years) and Hamster has no way of
deleting (local cancel) already received articles, so this spam would
forever pollute my local news server (and hence its disk space, backup, etc.).
Carlos E. R. <robin_listas@es.invalid> wrote:
On 2023-12-06 22:06, J๖rg Lorenz wrote:
On 06.12.23 21:48, Carlos E. R. wrote:
On 2023-12-06 21:22, micky wrote:
Wow, just now 25 real posts and 2600 spam. Thank goodness for filters.
Where? I only saw one or two, in this group at least.
Don't you understand how it works?
It depends whether your service provider is filtering or not.
My goodness, Carlos!
Do you really think I didn't know?
You are a fun spoiler.
On News.Individual.Net there are big holes in the article number
ranges, i.e. where the spam articles were before they got (locally)
canceled.
For safety reasons, I pull only 50 articles at a time, but because of
the holes, each pull actually pulls only a few or no articles.
Because today my own posts from yesterday appeared, I found out that
my pulls have a backlog of some 2000 (mostly non-existing) articles.
So if I'm slow in responding, you know why! :-) Just blame Google
(Groups).
Yesterday, I wrote:
Carlos E. R. <robin_listas@es.invalid> wrote:
On 2023-12-06 22:06, Jรถrg Lorenz wrote:
On 06.12.23 21:48, Carlos E. R. wrote:
On 2023-12-06 21:22, micky wrote:
On News.Individual.Net there are big holes in the article number
ranges, i.e. where the spam articles were before they got (locally)
canceled.
For safety reasons, I pull only 50 articles at a time, but because of
the holes, each pull actually pulls only a few or no articles.
Because today my own posts from yesterday appeared, I found out that
my pulls have a backlog of some 2000 (mostly non-existing) articles.
So if I'm slow in responding, you know why! :-) Just blame Google
(Groups).
It seems that currently News.Individual.Net is not able to catch all Google Groups spam in this group.
My filter caught some 50 extra spam articles in about 6 hours, so even
on a filtered feed (NIN), more spam than ham (legit articles).
Perhaps the spammers changed something in their posts, which makes the filters to miss some articles.
Also one spam article (with (probably) the known key) in a dormant
group (comp.sys.hp.misc).
Carlos E. R. <robin_listas@es.invalid> wrote:
On 2023-12-07 19:01, Frank Slootweg wrote:
Carlos E. R. <robin_listas@es.invalid> wrote:
On 2023-12-06 22:06, Jรถrg Lorenz wrote:
On 06.12.23 21:48, Carlos E. R. wrote:
On 2023-12-06 21:22, micky wrote:
Wow, just now 25 real posts and 2600 spam. Thank goodness for filters.
Where? I only saw one or two, in this group at least.
Don't you understand how it works?
It depends whether your service provider is filtering or not.
My goodness, Carlos!
Do you really think I didn't know?
You are a fun spoiler.
On News.Individual.Net there are big holes in the article number
ranges, i.e. where the spam articles were before they got (locally)
canceled.
For safety reasons, I pull only 50 articles at a time, but because of >>> the holes, each pull actually pulls only a few or no articles.
Because today my own posts from yesterday appeared, I found out that >>> my pulls have a backlog of some 2000 (mostly non-existing) articles.
So if I'm slow in responding, you know why! :-) Just blame Google
(Groups).
Two or three times, start of day, machine booted or coming from
suspend/hibernation, Thunderbird asks for permission to download 3000
headers. But then just a few actually show up.
Maybe TB is just looking at the index number, and as you say, there are
holes.
Trying to load 3000 articles is probably enough. Over the past few
days, I've seen article number deltas of some 2000 per day.
A newsreader can only ask for headers by article numbers, because
while it does know past article numbers (and so can ask for the next
ones), it does not know the message-ids of the next ones (because the message-ids are in the headers which it still has to fetch).
So the newsreader only gets the headers for the articles which
actually exist, not for the (spam) articles which have been (locally) canceled by the news server.
So your 3000 headers at a time works for you.
I OTOH have to do it bit by bit, because my local news server
(Hamster) does the fetching of headers and articles and I do not want to
risk loading *other* (than this GG) 'spam', because I keep my groups 'forever' (currently upto some 20 years) and Hamster has no way of
deleting (local cancel) already received articles, so this spam would
forever pollute my local news server (and hence its disk space, backup, etc.).
On 2023-12-08 19:58, Frank Slootweg wrote:
Yesterday, I wrote:
Carlos E. R. <robin_listas@es.invalid> wrote:
On 2023-12-06 22:06, J๖rg Lorenz wrote:
On 06.12.23 21:48, Carlos E. R. wrote:
On 2023-12-06 21:22, micky wrote:
...
On News.Individual.Net there are big holes in the article number
ranges, i.e. where the spam articles were before they got (locally)
canceled.
For safety reasons, I pull only 50 articles at a time, but because of >>> the holes, each pull actually pulls only a few or no articles.
Because today my own posts from yesterday appeared, I found out that
my pulls have a backlog of some 2000 (mostly non-existing) articles.
So if I'm slow in responding, you know why! :-) Just blame Google
(Groups).
It seems that currently News.Individual.Net is not able to catch all
Google Groups spam in this group.
My filter caught some 50 extra spam articles in about 6 hours, so even
on a filtered feed (NIN), more spam than ham (legit articles).
I have seen maybe a dozen not caught spam, compared to a several
thousands posts deleted. I'm not complaining.
The only thing I have seen it that the upstream filter has a delay, it >deleted spam after it has been posted, so that Thunderbird may download
those before they are deleted. As they become cached, they are not >automatically deleted locally when they are deleted upstream.
For these I am editing a filter.
Perhaps the spammers changed something in their posts, which makes the
filters to miss some articles.
Yeah, of course, they must be changing things.
Also one spam article (with (probably) the known key) in a dormant
group (comp.sys.hp.misc).
On 2023-12-08 19:58, Frank Slootweg wrote:[...]
It seems that currently News.Individual.Net is not able to catch all Google Groups spam in this group.
My filter caught some 50 extra spam articles in about 6 hours, so even on a filtered feed (NIN), more spam than ham (legit articles).
I have seen maybe a dozen not caught spam, compared to a several
thousands posts deleted. I'm not complaining.
The only thing I have seen it that the upstream filter has a delay, it deleted spam after it has been posted, so that Thunderbird may download
those before they are deleted. As they become cached, they are not automatically deleted locally when they are deleted upstream.
For these I am editing a filter.
Perhaps the spammers changed something in their posts, which makes the filters to miss some articles.
Yeah, of course, they must be changing things.
Also one spam article (with (probably) the known key) in a dormant
group (comp.sys.hp.misc).
Carlos E. R. <robin_listas@es.invalid> wrote:
On 2023-12-08 19:58, Frank Slootweg wrote:[...]
It seems that currently News.Individual.Net is not able to catch all >>> Google Groups spam in this group.
My filter caught some 50 extra spam articles in about 6 hours, so even >>> on a filtered feed (NIN), more spam than ham (legit articles).
I have seen maybe a dozen not caught spam, compared to a several
thousands posts deleted. I'm not complaining.
The only thing I have seen it that the upstream filter has a delay, it
deleted spam after it has been posted, so that Thunderbird may download
those before they are deleted. As they become cached, they are not
automatically deleted locally when they are deleted upstream.
Yes, I don't know what NIN is doing, but I think they are indeed
deleting (local 'cancel' commands) the spam articles *after* the fact,
so there is indeed a time they are on the server - and hence can_be/are downloaded to one's newsreader - before they are deleted.
So that's not 'filtering' per se, but deleting after the fact.
That might seem like a strange way of doing things, but that's
inherent in the way news server peer with other servers and how they
present articles to newsreaders.
Theoretically, this could be changed to real filtering, but it
requires quite a big change in how the news server are set up. Not just changing some settings, but really redesigning their infrastructure.
NIN says "We ... have some anti-spam measures for our reader servers"
[1], but doesn't detail those measures.
For these I am editing a filter.
Yes, I do the same. Anything from Google Groups gets dropped by my
Hamster server.
Perhaps the spammers changed something in their posts, which makes the >>> filters to miss some articles.
Yeah, of course, they must be changing things.
Also one spam article (with (probably) the known key) in a dormant
group (comp.sys.hp.misc).
It is strange that of my subscribed newsgroups, the GG spam is only in this group (comp.mobile.android). (The single spam article is comp.sys.hp.misc is an exception.)
Do you/others also see the GG spam only in this group?
[1] Message-ID: <ktj0j1F3r9tU1@mid.uni-berlin.de>
It is strange that of my subscribed newsgroups, the GG spam is only in
this group (comp.mobile.android). (The single spam article is >comp.sys.hp.misc is an exception.)
Do you/others also see the GG spam only in this group?
On 2023-12-09 18:13, micky wrote:
In comp.mobile.android, on 9 Dec 2023 13:02:33 GMT, Frank Slootweg
<this@ddress.is.invalid> wrote:
It is strange that of my subscribed newsgroups, the GG spam is only in >>> this group (comp.mobile.android). (The single spam article is
comp.sys.hp.misc is an exception.)
Do you/others also see the GG spam only in this group?
Yes, google groups spam only in comp.mobile.android. Not the other 5
groups I read regularly.
Again this morning, 1900 or so of spam.
But where does Forte agent 5 put them when it filters them out? The
only new ones in my trash are two posts from yesterday, both of which I
remember deleting myself. And there are none in Junk (Maybe I was
wrong when yesterday I said there was 1.)
I don't know in Forte Agent, but that's not how nntp works.
The client keeps an index of deleted messages, but it can not "move"
them anywhere. The indexes and probably the slots are there, unmoved.
Just that there is no cached content.
It is not as IMAP. You delete something, that post is deleted on the
server. Here, you can not delete anything, because you don't have an
account, space on the server.
What do the spammers get out of doing this? It seems like at least some
work is involved.
Done by scripts.
In comp.mobile.android, on 9 Dec 2023 13:02:33 GMT, Frank Slootweg <this@ddress.is.invalid> wrote:
It is strange that of my subscribed newsgroups, the GG spam is only in
this group (comp.mobile.android). (The single spam article is
comp.sys.hp.misc is an exception.)
Do you/others also see the GG spam only in this group?
Yes, google groups spam only in comp.mobile.android. Not the other 5
groups I read regularly.
Again this morning, 1900 or so of spam.
But where does Forte agent 5 put them when it filters them out? The
only new ones in my trash are two posts from yesterday, both of which I remember deleting myself. And there are none in Junk (Maybe I was
wrong when yesterday I said there was 1.)
What do the spammers get out of doing this? It seems like at least some
work is involved.
On 2023-12-09 14:02, Frank Slootweg wrote:[...]
So that's not 'filtering' per se, but deleting after the fact.
That might seem like a strange way of doing things, but that's
inherent in the way news server peer with other servers and how they present articles to newsreaders.
I guess they can not insert something like SpamAssassin in the incoming process.
It is strange that of my subscribed newsgroups, the GG spam is only in this group (comp.mobile.android). (The single spam article is comp.sys.hp.misc is an exception.)
I got a notice this afternoon about 600 messages on some other group,
but I clicked before reading. I think it was one of the Windows 10/11
groups.
Do you/others also see the GG spam only in this group?
[1] Message-ID: <ktj0j1F3r9tU1@mid.uni-berlin.de>
I see a little in a Linux group. Nothing like the thousands daily on
this one.
In comp.mobile.android, on 9 Dec 2023 13:02:33 GMT, Frank Slootweg <this@ddress.is.invalid> wrote:
It is strange that of my subscribed newsgroups, the GG spam is only in
this group (comp.mobile.android). (The single spam article is >comp.sys.hp.misc is an exception.)
Do you/others also see the GG spam only in this group?
Yes, google groups spam only in comp.mobile.android. Not the other 5
groups I read regularly.
Again this morning, 1900 or so of spam.
But where does Forte agent 5 put them when it filters them out? The
only new ones in my trash are two posts from yesterday, both of which I remember deleting myself. And there are none in Junk (Maybe I was
wrong when yesterday I said there was 1.)
What do the spammers get out of doing this? It seems like at least some
work is involved.
micky <NONONOmisc07@fmguy.com> wrote:
In comp.mobile.android, on 9 Dec 2023 13:02:33 GMT, Frank Slootweg
<this@ddress.is.invalid> wrote:
It is strange that of my subscribed newsgroups, the GG spam is only in
this group (comp.mobile.android). (The single spam article is
comp.sys.hp.misc is an exception.)
Do you/others also see the GG spam only in this group?
Yes, google groups spam only in comp.mobile.android. Not the other 5
groups I read regularly.
Again this morning, 1900 or so of spam.
But where does Forte agent 5 put them when it filters them out? The
only new ones in my trash are two posts from yesterday, both of which I
remember deleting myself. And there are none in Junk (Maybe I was
wrong when yesterday I said there was 1.)
It depends on what your filter rule *does* when it encounters a
matching header. The most sane action would be to drop the article - not >(download and) save it - and also dropping the header. So after that,
there's nothing left.
What do the spammers get out of doing this? It seems like at least some
work is involved.
That's the million dollar question. Who on earth is going to look at
such articles and where (on GG or Usenet)?
As to 'work': As with all spam, one or a few persons make the spamming
tools, the others just run them and sit back, watching the show.
In comp.mobile.android, on Sat, 9 Dec 2023 18:24:33 +0100, "Carlos E.
R." <robin_listas@es.invalid> wrote:
On 2023-12-09 18:13, micky wrote:
In comp.mobile.android, on 9 Dec 2023 13:02:33 GMT, Frank Slootweg
<this@ddress.is.invalid> wrote:
What do the spammers get out of doing this? It seems like at least some >>> work is involved.
Done by scripts.
Even with scripts, it must take some work. Who writes the subject
lines, all of which are little different? Who writes and/or maintains
the scripts?
micky <NONONOmisc07@fmguy.com> wrote:
In comp.mobile.android, on 9 Dec 2023 13:02:33 GMT, Frank Slootweg
<this@ddress.is.invalid> wrote:
But where does Forte agent 5 put them when it filters them out? The
only new ones in my trash are two posts from yesterday, both of which I
remember deleting myself. And there are none in Junk (Maybe I was
wrong when yesterday I said there was 1.)
It depends on what your filter rule *does* when it encounters a
matching header. The most sane action would be to drop the article - not (download and) save it - and also dropping the header. So after that,
there's nothing left.
What do the spammers get out of doing this? It seems like at least some
work is involved.
That's the million dollar question. Who on earth is going to look at
such articles and where (on GG or Usenet)?
As to 'work': As with all spam, one or a few persons make the spamming tools, the others just run them and sit back, watching the show.
On 2023-12-09 19:12, Frank Slootweg wrote:
micky <NONONOmisc07@fmguy.com> wrote:
In comp.mobile.android, on 9 Dec 2023 13:02:33 GMT, Frank Slootweg
<this@ddress.is.invalid> wrote:
...
But where does Forte agent 5 put them when it filters them out? The
only new ones in my trash are two posts from yesterday, both of which I
remember deleting myself. And there are none in Junk (Maybe I was
wrong when yesterday I said there was 1.)
It depends on what your filter rule *does* when it encounters a
matching header. The most sane action would be to drop the article - not (download and) save it - and also dropping the header. So after that, there's nothing left.
There has to be an index entry. Either the index entry of the upstream server, marking the post dropped or something, or the message-id.
The servers might run out of index numbers :-?
Carlos E. R. <robin_listas@es.invalid> wrote:
I guess they can not insert something like SpamAssassin in the incoming
process.
AFAIK they can not. OTOH I seem to vaguely remember something about 'hooks', like 'perl-hooks' but don't remember if that's only in the
reader path or also in the path between peers 'feeding' eachother. Too
long ago since I ran a real news server (INN)! :-)
I see no GG spam in the Windows groups (including the Windows 10/11
ones) and my filter logs show no dropped GG articles in those groups.
Mind, it could be a denial of service attack attempt.
The servers might run out of index numbers :-?
Frank Slootweg <this@ddress.is.invalid> wrote...
Carlos E. R. <robin_listas@es.invalid> wrote:
I guess they can not insert something like SpamAssassin in the incoming
process.
AFAIK they can not. OTOH I seem to vaguely remember something about 'hooks', like 'perl-hooks' but don't remember if that's only in the
reader path or also in the path between peers 'feeding' eachother. Too
long ago since I ran a real news server (INN)! :-)
To resolve that, the INN software allows embedding a Perl (or Python)
script that can inspect each article upon arrival, and tell the server
to "filter" it. The de-facto standard is called Cleanfeed (not to be
confused with the *censored* British content filter). It may be
installed on any kind of server, for transit or client-facing.
It is possible to call SpamAssassin from there, but I'd strongly advise against it: Time is important, on a text-only site the entire processing
of an article must be done in some 300ms on average. The Perl filter is
good enough, and I was surprised to see you can catch most of that junk
with just a few additional rules.
Anyway, for users I'd suggest:
Create a filter based on the Message-ID: Anything that ends in "n@googlegroups.com>" is very likely Spam.
or
Ask the admins of your server to honor NoCeMs, I can confirm they do a
very good job (roughly 99.9% gets caught).
I see no GG spam in the Windows groups (including the Windows 10/11
ones) and my filter logs show no dropped GG articles in those groups.
It's been more than 20 years since I stopped using Hamster because I
switched completely to Linux. But if memory serves me right, you might
see in the fetch logs there seem to be a lot of new articles, but in
fact they are not there. That's the spam that has been eliminated.
Christoph (not really reading this group, but using it to check the
quality of server-side filtering)
It is strange that of my subscribed newsgroups, the GG spam is only in
this group (comp.mobile.android). (The single spam article is comp.sys.hp.misc is an exception.)
Do you/others also see the GG spam only in this group?
I see no GG spam in the Windows groups (including the Windows 10/11
ones) and my filter logs show no dropped GG articles in those groups.
That's the million dollar question. Who on earth is going to look at
such articles and where (on GG or Usenet)?
Frank Slootweg <this@ddress.is.invalid> wrote
That's the million dollar question. Who on earth is going to look at
such articles and where (on GG or Usenet)?
I think they're smarter than we might think, Frank.
I suspect they only want to get into the Google Groups search engine.
Many results on Google groups show up in a "normal" Google search.
If they put out a billion spams, some will eventually show up in a "normal" >Google search (i.e., using the main google.com search engine as opposed to >groups.google.com search engines).
I haven't looked extensively but they don't seem to be spamming groups
(such as the Windows 10 and 11 newsgroups you and I post to) which aren't >auto-archived - but that could also be because the portal might not work.
Dunno what they're doing for real, but micky isn't correct that it's only >this newsgroup as it's certainly other newsgroups getting the same spam.
<https://groups.google.com/g/alt.internet.wireless> <https://groups.google.com/g/alt.comp.microsoft.windows> <https://groups.google.com/g/uk.telecom.mobile> <https://groups.google.com/g/rec.photo.digital>
<https://groups.google.com/g/alt.home.repair>
etc.
Just downloaded this morning's set of posts. Got 7 posts but 191 that
my new filter deleted. It's roughtly
message-id:@google-groups (sp? Hyphen? @?)
It deletes everything from googlegroups. I hope no normal person is
trying to post from google groups, because I won't see his post. Maybe
I'll see answers unless everyone else is filtering based on that too.
Or maybe he can post the same things again after the jerk who is
spamming us stops. OTOH, will I actually think to remove my filter when
that time comes? If someone reminds me, yet.
Dunno what they're doing for real, but micky isn't correct that it's only >>this newsgroup as it's certainly other newsgroups getting the same spam.
<https://groups.google.com/g/alt.internet.wireless>
<https://groups.google.com/g/alt.comp.microsoft.windows>
<https://groups.google.com/g/uk.telecom.mobile>
<https://groups.google.com/g/rec.photo.digital>
I don't read any of these groups.
<https://groups.google.com/g/alt.home.repair>
etc.
But I do read this one and I get very little spam, what I do get (3 or 4 every day or 2 or 3) is the same I've been getting for months before the recent onslaught in CMA, and ttbomr, they don't resemble what I got in
the Android group, CMA.
My filter is only for the Android group, but it's possible my news
server is filtering them out for AHR but not CMA.
I will pay more attention to what I've been getting and see if they are
from google groups and see if the style resembles CMA's
micky <NONONOmisc07@fmguy.com> wrote
Dunno what they're doing for real, but micky isn't correct that it's only >>>this newsgroup as it's certainly other newsgroups getting the same spam.
<https://groups.google.com/g/alt.internet.wireless>
<https://groups.google.com/g/alt.comp.microsoft.windows>
<https://groups.google.com/g/uk.telecom.mobile>
<https://groups.google.com/g/rec.photo.digital>
I don't read any of these groups.
I'm sure you don't so I was just being clear that it's many newsgroups.
For example, Dave Royal pointed out this newsgroup is being spammed:
<https://groups.google.com/g/rec.music.makers.squeezebox/>
Suffice to say they're spamming a _lot_ of newsgroups; but not all. :)
<https://groups.google.com/g/alt.home.repair>
etc.
But I do read this one and I get very little spam, what I do get (3 or 4
every day or 2 or 3) is the same I've been getting for months before the
recent onslaught in CMA, and ttbomr, they don't resemble what I got in
the Android group, CMA.
My filter is only for the Android group, but it's possible my news
server is filtering them out for AHR but not CMA.
I will pay more attention to what I've been getting and see if they are
from google groups and see if the style resembles CMA's
Upon closer inspection, the spam on a.h.r is the kind of spam that forced >good people out of that newsgroup long ago, as Steve, badgolferman and I
used to post regularly there until you guys (yes, you too micky) turned it
into a political cesspool of jewish-hating political rants, micky.
So you may be right on a.h.r and I might be wrong, as it's unusable even >before the anonymous spammers get their paws on that specific portal.
| Sysop: | Keyop |
|---|---|
| Location: | Huddersfield, West Yorkshire, UK |
| Users: | 297 |
| Nodes: | 16 (2 / 14) |
| Uptime: | 09:21:17 |
| Calls: | 6,666 |
| Files: | 12,213 |
| Messages: | 5,336,264 |