I’m seeing posts in non-latin writing systems, particularly Hebrew and >Arabic. They appear to be posted using Google Groups, and contain lots of >anomymised links which I, for one, ain’t gonna click on.
I just killed a whole bunch of them.
I’m seeing posts in non-latin writing systems, particularly Hebrew and >Arabic. They appear to be posted using Google Groups, and contain lots of >anomymised links which I, for one, ain’t gonna click on.
I just killed a whole bunch of them.
I’m seeing posts in non-latin writing systems, particularly Hebrew and Arabic. They appear to be posted using Google Groups, and contain lots of anomymised links which I, for one, ain’t gonna click on.
I just killed a whole bunch of them.
I’m seeing posts in non-latin writing systems, particularly Hebrew and Arabic. They appear to be posted using Google Groups, and contain lots of anomymised links which I, for one, ain’t gonna click on.
I just killed a whole bunch of them.
On Thursday, November 23, 2023 at 10:22:01 AM UTC-5, WolfFan wrote:
I’m seeing posts in non-latin writing systems, particularly Hebrew and
Arabic. They appear to be posted using Google Groups, and contain lots of
anomymised links which I, for one, ain’t gonna click on.
I just killed a whole bunch of them.
If your newsreader has a decent killfile feature, kill on the Subject containing any of several common Thai characters.
Pt
On 11/23/2023 9:21 AM, WolfFan wrote:
I’m seeing posts in non-latin writing systems, particularly Hebrew and Arabic. They appear to be posted using Google Groups, and contain lots of anomymised links which I, for one, ain’t gonna click on.
I just killed a whole bunch of them.
Ray Banana (the Eternal-September (E-S) owner and admin) has been
leading the fight to get rid of the Thai and other non-English spam.
The spammer is not doing it for money, he is doing to taunt people.
Ray
has been doing a great job and hacking up his news server software and cluster like crazy.
Ray found another backdoor into his news server cluster Tuesday using
UUCP and slammed that shut so he may have gotten rid of it for the moment.
Unfortunately, Ray's solution using Spam Assassin is having a problem
with false positives. I have alerted Ray to a problem with a posting
from Ahasuerus getting deleted yesterday but I am not sure that Ray can
fix it as the posting was 95% quoted and that is a trigger for SA.
Lynn
On Nov 23, 2023, Lynn McGuire wrote
(in article <ujog5i$1vuc9$1@dont-email.me>):
On 11/23/2023 9:21 AM, WolfFan wrote:
I’m seeing posts in non-latin writing systems, particularly Hebrew and >>> Arabic. They appear to be posted using Google Groups, and contain lots of >>> anomymised links which I, for one, ain’t gonna click on.
I just killed a whole bunch of them.
Ray Banana (the Eternal-September (E-S) owner and admin) has been
leading the fight to get rid of the Thai and other non-English spam.
The spammer is not doing it for money, he is doing to taunt people.
interesting. It’s rather ineffectual as both spam and taunts when it is so easily detected (at least when using a newsreader like the Hog) and instantly killable, even if you don’t use a killfile for it. I had a look at one, killed it, scanned the list of available posts, selected posts similar, killed them. Took less than 5 minutes. I kill new posts as necessary, takes less than 5 seconds. If I get tired of killing posts by hand, I’ll add a line or two to the killfile. All that m’man is doing is convincing me that he’s not real bright.
Ray
has been doing a great job and hacking up his news server software and
cluster like crazy.
Ray found another backdoor into his news server cluster Tuesday using
UUCP and slammed that shut so he may have gotten rid of it for the moment. >>
Unfortunately, Ray's solution using Spam Assassin is having a problem
with false positives. I have alerted Ray to a problem with a posting
from Ahasuerus getting deleted yesterday but I am not sure that Ray can
fix it as the posting was 95% quoted and that is a trigger for SA.
Lynn
On 11/23/2023 9:21 AM, WolfFan wrote:
I’m seeing posts in non-latin writing systems, particularly Hebrew and
Arabic. They appear to be posted using Google Groups, and contain lots of
anomymised links which I, for one, ain’t gonna click on.
I just killed a whole bunch of them.
Ray Banana (the Eternal-September (E-S) owner and admin) has been
leading the fight to get rid of the Thai and other non-English spam.
The spammer is not doing it for money, he is doing to taunt people. Ray
has been doing a great job and hacking up his news server software and >cluster like crazy.
Ray found another backdoor into his news server cluster Tuesday using
UUCP and slammed that shut so he may have gotten rid of it for the moment.
Unfortunately, Ray's solution using Spam Assassin is having a problem
with false positives. I have alerted Ray to a problem with a posting
from Ahasuerus getting deleted yesterday but I am not sure that Ray can
fix it as the posting was 95% quoted and that is a trigger for SA.
On Thursday, November 23, 2023 at 10:22:01=E2=80=AFAM UTC-5, WolfFan wrote:
I=E2=80=99m seeing posts in non-latin writing systems, particularly Hebre= >w and=20
Arabic. They appear to be posted using Google Groups, and contain lots of= >=20
anomymised links which I, for one, ain=E2=80=99t gonna click on.=20
=20
I just killed a whole bunch of them.
If your newsreader has a decent killfile feature, kill on the Subject=20 >containing any of several common Thai characters.
I am seeing things like the quoted text below in my feed. I use >eternal-September so maybe I am seeing Spam Assassin stuff. I know I
have not been able to see one or two of my posts that others have seen.
Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail >> From: Lynn McGuire <lynnmcguire5@gmail.com>
Newsgroups: rec.arts.sf.written
Subject: Re: Anyone else notice a lot of strange posts?
Date: Thu, 23 Nov 2023 23:44:45 -0600
Organization: A noiseless patient Spider
Lines: 46
Message-ID: <ujpd8f$27b71$1@dont-email.me>
References: <0001HW.2B0FA588035BE30A70000E90338F@news.supernews.com>
<ujog5i$1vuc9$1@dont-email.me>
<0001HW.2B1065EE0388FA7F70000409F38F@news.supernews.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 24 Nov 2023 05:44:47 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="ae9a8e13882e4f64049a91a3498331fe";
logging-data="2338017"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+nOEgHadJI1daEskQcnuc8zrjd6bC0hnI="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:tTUZ0Xrs1CY2oUD1+JzfYs60Ys0=
In-Reply-To: <0001HW.2B1065EE0388FA7F70000409F38F@news.supernews.com>
Content-Language: en-US
Xref: news.eternal-september.org rec.arts.sf.written:613026
I am also adding these extra lines to see if my message DOESN'T get
caught up in SA.
If what was said previously is true, quoting a message that quotes text
that goes 6 deep in other messages and just adding "I agree" to your
message will trip the eternal-september SA filter.
Is anyone else seeing message header data in any of the messages they
are reading?
In article <0001HW.2B0FA588035BE30A70000E90338F@news.supernews.com>,
WolfFan <akwolffan@zoho.com> wrote:
I just killed a whole bunch of them.
things, but something.
Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail From: Lynn McGuire <lynnmcguire5@gmail.com>
Newsgroups: rec.arts.sf.written
Subject: Re: Anyone else notice a lot of strange posts?
Date: Thu, 23 Nov 2023 23:44:45 -0600
Organization: A noiseless patient Spider
Lines: 46
Message-ID: <ujpd8f$27b71$1@dont-email.me>
References: <0001HW.2B0FA588035BE30A70000E90338F@news.supernews.com>
<ujog5i$1vuc9$1@dont-email.me>
<0001HW.2B1065EE0388FA7F70000409F38F@news.supernews.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 24 Nov 2023 05:44:47 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="ae9a8e13882e4f64049a91a3498331fe";
logging-data="2338017"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+nOEgHadJI1daEskQcnuc8zrjd6bC0hnI="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:tTUZ0Xrs1CY2oUD1+JzfYs60Ys0=
In-Reply-To: <0001HW.2B1065EE0388FA7F70000409F38F@news.supernews.com> Content-Language: en-US
Xref: news.eternal-september.org rec.arts.sf.written:613026
I believe your news admins are acceping nocem cancels so you are probably seeing a lot less of this than people on sites that don't. But a killfile will help a whole lot to remove the remaining ones since they have pretty clear spam signatures.Unfortunately, Ray's solution using Spam Assassin is having a problem
with false positives. I have alerted Ray to a problem with a posting
--scott
In article <ujqqtg$2e6a3$1@dont-email.me>, Dave <bcfd36@cruzio.com> wrote:
I am seeing things like the quoted text below in my feed. I use
eternal-September so maybe I am seeing Spam Assassin stuff. I know I
have not been able to see one or two of my posts that others have seen.
Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail >>> From: Lynn McGuire <lynnmcguire5@gmail.com>
Newsgroups: rec.arts.sf.written
Subject: Re: Anyone else notice a lot of strange posts?
Date: Thu, 23 Nov 2023 23:44:45 -0600
Organization: A noiseless patient Spider
Lines: 46
Message-ID: <ujpd8f$27b71$1@dont-email.me>
References: <0001HW.2B0FA588035BE30A70000E90338F@news.supernews.com>
<ujog5i$1vuc9$1@dont-email.me>
<0001HW.2B1065EE0388FA7F70000409F38F@news.supernews.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 24 Nov 2023 05:44:47 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="ae9a8e13882e4f64049a91a3498331fe";
logging-data="2338017"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+nOEgHadJI1daEskQcnuc8zrjd6bC0hnI="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:tTUZ0Xrs1CY2oUD1+JzfYs60Ys0=
In-Reply-To: <0001HW.2B1065EE0388FA7F70000409F38F@news.supernews.com>
Content-Language: en-US
Xref: news.eternal-september.org rec.arts.sf.written:613026
All of this looks perfectly normal (except in that the post isNone of the header data has EVER shown up in text body of incoming
MIME-encoded, which is kind of rude but perfectly allowed). What are
you thinking is a problem here?
I am also adding these extra lines to see if my message DOESN'T get
caught up in SA.
What extra lines are you adding and why would you think your messages
would ever get caught up in Spamasassin? You aren't posting from
Google Groups.
If what was said previously is true, quoting a message that quotes text
that goes 6 deep in other messages and just adding "I agree" to your
message will trip the eternal-september SA filter.
I don't know, because I don't know how eternal-september is filtering messages from their customers, and it probably changes on a daily basis.
In this case the issue isn't how they filter messages from their customers but how they filter messages from Google Groups, since that is where all
the spam (really, where all spam period) originates.
Is anyone else seeing message header data in any of the messages they
are reading?
I see message header data in every message I read, and have for the past forty years now. It's important.
I am very confused about what you think your problem is.
--scott
messages prior to a few weeks ago. If you will notice, the header data
is shown in the quoted area of a previous message. This is not normal.
So, my problem is that header data from deleted messages is showing up
in the body text of other messages. Messages from me and other users are
not showing up but when this happens, header data will show up in the
body of other messages. THAT is my problem.
Try not to be condescending. I've been doing this a long time.
None of the header data has EVER shown up in text body of incoming
messages prior to a few weeks ago. If you will notice, the header data
is shown in the quoted area of a previous message. This is not normal.
So, my problem is that header data from deleted messages is showing up
in the body text of other messages. Messages from me and other users are
not showing up but when this happens, header data will show up in the
body of other messages. THAT is my problem.
I’m seeing posts in non-latin writing systems, particularly Hebrew
and Arabic. They appear to be posted using Google Groups, and contain
lots of anomymised links which I, for one, ain’t gonna click on.
I just killed a whole bunch of them.
Sysop: | Keyop |
---|---|
Location: | Huddersfield, West Yorkshire, UK |
Users: | 302 |
Nodes: | 16 (2 / 14) |
Uptime: | 79:13:37 |
Calls: | 6,762 |
Files: | 12,289 |
Messages: | 5,378,154 |