4 ms·

Hey Benjamin, 1) This test is representative of our system. I realize that other systems can be set up different with different settings. given that users of t

Hey Benjamin, 1) This test is representative of our system. I realize that other systems can be set up different with different settings. given that users of the Postmark app send email through us, they might be interested to see what we might consider as spam. 2) The thing is that there are a lot of tests that spamd does that they can't defeat, even if they're aware of them. security by obscurity isn't really how spamd works anyway :) and no, you're not at all negative. by all means, please feedback at us :)

darklajid 15y ago
Thanks for getting back - and looking up my profile is - special. :) 1) Agreed. So it's ~accurate~ really only for recipients that would use your service/the same configuration/classification, right? For everyone else this is an approximation. With a nice api and some UI love, but still. 2) Agreed, a lot of things are unbeatable. But you yourself market this as 'most often the _content_ leads to classification as spam' solution. Everyone can change the content, good guy and bad guy. I'm not saying that the idea sucks and quite frankly someone involved into a business that sends unsolicited mail should know the deal already, but I still think that you're offering yet another testcase. Security by obscurity is not the problem, the thing is: Can I create a client for your API that randomly appends/prepends/inserts meaningful text into my crap content and evaluate your opinion on my crap x times per second? You commented elsewhere that you're not keeping my content, so - how are you going to notice this abuse? Okay, _NOW_ I'm too negative. Still - rate limit that stuff. :)
- orenmazor 15y ago
  Thanks a lot. Now I'm going to spend half the evening writing a script to grab random spam out of my gmail and using this API to try and automatically turn spam into ham. I bet siri can already do this.
  - darklajid 15y ago
    I'd expect her to answer with "I'm afraid I can't do that, Oren" - but give it a try and good luck :)

darklajid 15y ago

Thanks for getting back - and looking up my profile is - special. :) 1) Agreed. So it's ~accurate~ really only for recipients that would use your service/the same configuration/classification, right? For everyone else this is an approximation. With a nice api and some UI love, but still. 2) Agreed, a lot of things are unbeatable. But you yourself market this as 'most often the _content_ leads to classification as spam' solution. Everyone can change the content, good guy and bad guy. I'm not saying that the idea sucks and quite frankly someone involved into a business that sends unsolicited mail should know the deal already, but I still think that you're offering yet another testcase. Security by obscurity is not the problem, the thing is: Can I create a client for your API that randomly appends/prepends/inserts meaningful text into my crap content and evaluate your opinion on my crap x times per second? You commented elsewhere that you're not keeping my content, so - how are you going to notice this abuse? Okay, _NOW_ I'm too negative. Still - rate limit that stuff. :)

orenmazor 15y ago
Thanks a lot. Now I'm going to spend half the evening writing a script to grab random spam out of my gmail and using this API to try and automatically turn spam into ham. I bet siri can already do this.
- darklajid 15y ago
  I'd expect her to answer with "I'm afraid I can't do that, Oren" - but give it a try and good luck :)