Discussion:
Nocem and Spam
(too old to reply)
llp
2024-03-31 17:32:07 UTC
Permalink
Hi,

the big spam waves are over and that's a good thing.

Consulting the excellent
<https://www.novabbs.com/SEARCH/search_nocem.php?stats=daily&msgid=
tool>
I noticed that, on certain days, a lot of messages were still being
tagged by Nocem

So I'm going to take a look at the types of messages targeted by the
various nocems issuers.

I'll start with what surprised me most as a French speaker: there would
be daily spam on groups in the "fr" hierarchy. Having consulted a
sample of nocem, it's "nono le petit robot" who seems to produce them.


--------------------------------------------------------
"nono le petit robot"
Analysis(1) of March 31st nocems from 10:35am to 3:15pm
--------------------------------------------------------

Type "spam"
4 nocems over the period studied: <uubao6$qqd$***@rasp.pasdenom.info>,
<uubei3$2dv$***@rasp.pasdenom.info>, <uubnbb$jnh$***@rasp.pasdenom.info>
and <uubnkm$kd1$***@rasp.pasdenom.info>

That's 8 users messages, all on the "fr.soc.politique" group.
None of these messages is spam.
The false positive rate is 100%.



Type "spam2"
5 nocems over the period studied: <uubgaa$5g0$***@rasp.pasdenom.info>,
<uubl9m$fna$***@rasp.pasdenom.info>, <uublj3$g8q$***@rasp.pasdenom.info>,
<uubmoj$ie0$***@rasp.pasdenom.info> and <uubn1v$j48$***@rasp.pasdenom.info>

That's 6 users messages, all on the "fr.soc.politique" group.
None of these messages is spam.
The false positive rate is 100%.



Type "spam3":
2 nocems over the period studied: <uubelr$2k5$***@rasp.pasdenom.info> and
<uublmq$gj7$***@rasp.pasdenom.info>

This represents 13 users messages, 11 of which concern the
"fr.soc.politique" group and 1 message is not accessible (on
nemo.bavardages),
the others are not spam.
The false positive rate is therefore 92%.




Conclusion: The spam detection success rates claimed by the robot(2)
are not reflected in the annalyzed sample. Instead of the 99.99%
success rate expected for the "spam" type, here we're at 0%.




The rest of the nocems review in a future post.




(1) Why didn't you analyze the whole day or a week or a month? I didn't
have the courage to go any further, given that the analysis is the same
for each nocem looked at and that it corresponds to the reading
experience of the "fr" groups where spam is not visible.
(2) <https://pasdenom.info/nocem.html>
--
Admin of news.usenet.ovh
Marco Moock
2024-03-31 18:27:58 UTC
Permalink
Post by llp
the big spam waves are over and that's a good thing.
Those from Google. Not those from Abavia.
--
kind regards
Marco

Send spam to ***@cartoonies.org
Ray Banana
2024-03-31 19:01:58 UTC
Permalink
Post by Marco Moock
Post by llp
the big spam waves are over and that's a good thing.
Those from Google. Not those from Abavia.
Abavia seems to have stopped propagating articles to their peers several
days ago,
--
Пу́тін — хуйло́
https://www.eternal-september.org
Marco Moock
2024-03-31 19:07:42 UTC
Permalink
Post by Ray Banana
Post by Marco Moock
Post by llp
the big spam waves are over and that's a good thing.
Those from Google. Not those from Abavia.
Abavia seems to have stopped propagating articles to their peers
several days ago,
Entirely or only the spam?
--
kind regards
Marco

Send spam to ***@cartoonies.org
Ray Banana
2024-03-31 19:40:15 UTC
Permalink
Post by Marco Moock
Post by Ray Banana
Post by Marco Moock
Post by llp
the big spam waves are over and that's a good thing.
Those from Google. Not those from Abavia.
Abavia seems to have stopped propagating articles to their peers
several days ago,
Entirely or only the spam?
No incoming articles at all from Abavia.
--
Пу́тін — хуйло́
https://www.eternal-september.org
candycanearter07
2024-04-01 15:16:35 UTC
Permalink
Post by Ray Banana
Post by Marco Moock
Post by Ray Banana
Post by Marco Moock
Post by llp
the big spam waves are over and that's a good thing.
Those from Google. Not those from Abavia.
Abavia seems to have stopped propagating articles to their peers
several days ago,
Entirely or only the spam?
No incoming articles at all from Abavia.
Are they still operating?
--
user <candycane> is generated from /dev/urandom
Ray Banana
2024-04-01 16:11:53 UTC
Permalink
Post by candycanearter07
Post by Ray Banana
Post by Marco Moock
Post by Ray Banana
Post by Marco Moock
Post by llp
the big spam waves are over and that's a good thing.
Those from Google. Not those from Abavia.
Abavia seems to have stopped propagating articles to their peers
several days ago,
Entirely or only the spam?
No incoming articles at all from Abavia.
Are they still operating?
They are still accepting articles from peers, just their outgoing
feeders seem to be inoperative, although I have seen ~100 articles
from them travelling on strange paths.
--
Пу́тін — хуйло́
https://www.eternal-september.org
candycanearter07
2024-04-01 16:30:08 UTC
Permalink
Post by Ray Banana
Post by candycanearter07
Post by Ray Banana
Post by Marco Moock
Post by Ray Banana
Post by Marco Moock
Post by llp
the big spam waves are over and that's a good thing.
Those from Google. Not those from Abavia.
Abavia seems to have stopped propagating articles to their peers
several days ago,
Entirely or only the spam?
No incoming articles at all from Abavia.
Are they still operating?
They are still accepting articles from peers, just their outgoing
feeders seem to be inoperative, although I have seen ~100 articles
from them travelling on strange paths.
Weird.. maybe some servers started blocking their messages?
--
user <candycane> is generated from /dev/urandom
Ray Banana
2024-04-01 17:10:07 UTC
Permalink
Post by candycanearter07
Post by Ray Banana
Post by candycanearter07
Post by Ray Banana
No incoming articles at all from Abavia.
Are they still operating?
They are still accepting articles from peers, just their outgoing
feeders seem to be inoperative, although I have seen ~100 articles
from them travelling on strange paths.
Weird.. maybe some servers started blocking their messages?
I don't see any incoming connections from them and I have certainly not
blocked them (I need their bot spam without any delay to create NoCeMs).
They have probably messed up their reverse DNS settings again.
--
Пу́тін — хуйло́
https://www.eternal-september.org
candycanearter07
2024-04-01 18:40:10 UTC
Permalink
Post by Ray Banana
Post by candycanearter07
Post by Ray Banana
Post by candycanearter07
Post by Ray Banana
No incoming articles at all from Abavia.
Are they still operating?
They are still accepting articles from peers, just their outgoing
feeders seem to be inoperative, although I have seen ~100 articles
from them travelling on strange paths.
Weird.. maybe some servers started blocking their messages?
I don't see any incoming connections from them and I have certainly not
blocked them (I need their bot spam without any delay to create NoCeMs).
They have probably messed up their reverse DNS settings again.
Oh, ok.
--
user <candycane> is generated from /dev/urandom
Thomas Hochstein
2024-04-01 07:12:09 UTC
Permalink
Post by Marco Moock
Post by Ray Banana
Abavia seems to have stopped propagating articles to their peers
several days ago,
Entirely or only the spam?
There was a difference?
Loading...