Lou Bert <kwncbcsiv@appbzy.invalid> wrote:

> HTH, e.g., in the subject line:

I'm testing filtering based on existence of Thai characters in the
subject. I'll see how it works.

On 26.10.2023 04:05, Adam W. wrote:

>I'm testing filtering based on existence of Thai characters in the
>subject. I'll see how it works.

But add several of the most relevant words (in Malayan and Indo-
nesian as well as in English) in the subject and from line.

Almost all of them from the jargon of the gam(bl)ing world
and that of the sports punters (cf. incl. "rugby, cricket, sailing,
swimming, fencing" & the like. Along with the spelling "futsal" for
"football").

And the misspellings "jonh", "oktaviani", "natasya" in the from line.
(The latter presumable created by the spammer's own brain out of
"natalie" and "asya".) Worth adding further misspellings if
systematically used instead of the correct spellings.

Plus some of the most frequent occurring emojis in the subject line.
Useful the including of these figures 303, 55, 77, 88, 99 in both lines.
(Esp. 88 seems to be part of various Indonesian and Malaysian names for
gaming / slot machine schemes.)

Thus a newsreader won't download over 90% of the crap (if the "ignore"
selected).

Lou

Le 26/10/2023 à 04:05, gof-cut-this-news@cut-this-chmurka.net.invalid
(Adam W.) a écrit :

> I'm testing filtering based on existence of Thai characters in the
> subject. I'll see how it works.

This is a good idea but will there still be legitimate posters on GG
according to the fact that you can't even read groups properly there as
everything is spam ?

In article <uhchi3$csr$4$arnold@news.chmurka.net>,
Adam W. <gof-cut-this-news@cut-this-chmurka.net.invalid> wrote:
>Lou Bert <kwncbcsiv@appbzy.invalid> wrote:
>
>> HTH, e.g., in the subject line:
>
>I'm testing filtering based on existence of Thai characters in the
>subject. I'll see how it works.

There could be a solution to this mess!
--
Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising!
Look at Psalms 14 and 53 on Atheism ; unsubscribe from Google Groups to be seen
When we want to believe on our own terms, divisions will abound. -unknown https://mindspring.com

On 10/25/23 23:20, Lou Bert wrote:
> On 26.10.2023 04:05, Adam W. wrote:
>
>> I'm testing filtering based on existence of Thai characters in the
>> subject. I'll see how it works.
>
> But add several of the most relevant words (in Malayan and Indo-
> nesian as well as in English) in the subject and from line.
>
> Almost all of them from the jargon of the gam(bl)ing world
> and that of the sports punters (cf. incl. "rugby, cricket, sailing,
> swimming, fencing" & the like. Along with the spelling "futsal" for
> "football").
>
> And the misspellings "jonh", "oktaviani", "natasya" in the from line.
> (The latter presumable created by the spammer's own brain out of
> "natalie" and "asya".) Worth adding further misspellings if
> systematically used instead of the correct spellings.
>
> Plus some of the most frequent occurring emojis in the subject line.
> Useful the including of these figures 303, 55, 77, 88, 99 in both lines.
> (Esp. 88 seems to be part of various Indonesian and Malaysian names for
> gaming / slot machine schemes.)
>
> Thus a newsreader won't download over 90% of the crap (if the "ignore"
> selected).
>
> Lou

Be careful not to get any legitimate users, tho
--
user <candycane> is generated from /dev/urandom

On Thu, 26 Oct 23 07:52:37 +0000, Eric M <conanospamic@gmail.com> wrote:
>Le 26/10/2023 a 04:05, gof-cut-this-news@cut-this-chmurka.net.invalid
>(Adam W.) a ecrit :
>
>> I'm testing filtering based on existence of Thai characters in the
>> subject. I'll see how it works.
>
>This is a good idea but will there still be legitimate posters on GG
>according to the fact that you can't even read groups properly there as
>everything is spam ?

anyone using googlegroups is a captive user, including the conspicuously
unresponsive google admins . . . they're caught in the system from which
there is no escape; googlespam is atrociously horrible and getting worse

On Thu, 26 Oct 23 07:52:37 +0000
Eric M <conanospamic@gmail.com> wrote:
> Le 26/10/2023 à 04:05, gof-cut-this-news@cut-this-chmurka.net.invalid
> (Adam W.) a écrit :
>
> > I'm testing filtering based on existence of Thai characters in the
> > subject. I'll see how it works.
>
> This is a good idea but will there still be legitimate posters on GG
> according to the fact that you can't even read groups properly there as
> everything is spam ?

Not all groups get spam. For example comp.os.cpm is completely clean and
has several users posting from googlegroups ; comp.lang.forth is similar (it
has a bit of spam). But even with comp.lang.fortran which gets a lot of
spam , there are persistent users posting (and presumably also reading) from
googlegroups. See for example
<27235fc9-90c1-47bd-a7d0-27295090da80n@googlegroups.com> which asked a
question , received a reply and the opening poster was patient enough to wade
through all the spam , find the reply and post
<6882cb61-40ab-407e-bd7e-b659f7f9e076n@googlegroups.com> .There is also
<7506dd56-b907-4c03-b725-4fe5d5f9fa9en@googlegroups.com> which gives hope
that some people are seeing the light.

Eric M <conanospamic@gmail.com> wrote:

> This is a good idea but will there still be legitimate posters on GG
> according to the fact that you can't even read groups properly there as
> everything is spam ?

Some groups get spammed, some don't (or very rarely). I don't know what
the key is.

Looking at hierarchies I carry:

- pl.*: only pl.soc.polityka is attacked by this Thai spam

- alt.*: only alt.chinese.text (but I don't carry certain binary groups,
so maybe spam is there too)

- comp.*: I see mostly comp.protocols.dicom, comp.lang.c,
comp.cad.cadence, comp.lang.fortran, comp.lang.c++

- rec.*: rec.arts.tv, sometimes rec.sports.golf and occasionally other
groups

- sci.*: mostly sci.crypt, sometimes sci.lang, what's interesting I can't
see sci.lang.japan anymore

- soc.*: only soc.culture.punjab

It's based on my 1 GiB buffer, with the oldest article from today (7:30 AM
CEST), and what my filter catches (I will change it later today slightly
to catch more).

Class SPAM for groups matching "chmurka.spam.*"
Buffer SPAM1, size: 1.00 GBytes, position: 400 MBytes 2.39 cycles
Newest: 2023-10-26 18:06:03, 0 days, 0:00:52 ago
Oldest: 2023-10-26 7:30:03, 0 days, 10:36:52 ago

I might add new buffers to increase the size (I have some space for it, I
just didn't expect that volume)...

Spiros Bousbouras <spibou@gmail.com> wrote:

> Not all groups get spam. For example comp.os.cpm is completely clean and
> has several users posting from googlegroups

Yes, and people immediately noticed when filters started removing
legitimate articles (I already reposted them locally, didn't distribute
them of course).

There's a thread on pl.sci.elektronika (in Polish) about my server
deleting "posts from gmail". Let's try Google Translate (I love how it
translated the server name to "cloudka")...

https://www-grupy-egospodarka-pl.translate.goog/Gmailowcy-sa-na-cenzurowanym,t,633610,8.html?_x_tr_sl=pl&_x_tr_tl=en&_x_tr_hl=pl&_x_tr_pto=wapp

So they definitely want it, notice it, and use it.

Le 26/10/2023 à 18:06, Spiros Bousbouras a écrit :

> Not all groups get spam. For example comp.os.cpm is completely clean and
> has several users posting from googlegroups ; comp.lang.forth is similar (it
> has a bit of spam). But even with comp.lang.fortran which gets a lot of
> spam , there are persistent users posting (and presumably also reading) from
> googlegroups.

Ok, so maybe delete all Google posts only on some groups, like comp.arch,
comp.lang.c or sci.lang.japan ? So that people can read them at least.
Maybe you're doing it already and I'm reinventing the wheel, I don't know
:)

On 2023-10-26 18:10, Adam W. wrote:
> Eric M <conanospamic@gmail.com> wrote:
>
>> This is a good idea but will there still be legitimate posters on GG
>> according to the fact that you can't even read groups properly there as
>> everything is spam ?
>
> Some groups get spammed, some don't (or very rarely). I don't know what
> the key is.
>
> Looking at hierarchies I carry:
>
> - pl.*: only pl.soc.polityka is attacked by this Thai spam
>
> - alt.*: only alt.chinese.text (but I don't carry certain binary groups,
> so maybe spam is there too)
>
> - comp.*: I see mostly comp.protocols.dicom, comp.lang.c,
> comp.cad.cadence, comp.lang.fortran, comp.lang.c++
>

What happened to the onslaught in comp.protocols.time.ntp, which has
recently switched to latinized subject lines.

All in all, this looks like a targeted attack with spammers either
uninterested in getting readers or tricked into participating in the
attack

Enjoy

Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded

Adam W. <gof-cut-this-news@cut-this-chmurka.net.invalid> wrote:
[...]
> Some groups get spammed, some don't (or very rarely). I don't know what
> the key is.
>
> Looking at hierarchies I carry:
>
> - pl.*: only pl.soc.polityka is attacked by this Thai spam
>
> - alt.*: only alt.chinese.text (but I don't carry certain binary groups,
> so maybe spam is there too)
>
> - comp.*: I see mostly comp.protocols.dicom, comp.lang.c,
> comp.cad.cadence, comp.lang.fortran, comp.lang.c++
>
> - rec.*: rec.arts.tv, sometimes rec.sports.golf and occasionally other
> groups

It seems that comp.mobile.android is also spammed/attacked.

I'm only lurking here (nanau, etc.) but have gmail.com addresses
filtered in comp.mobile.android and my 'newsreader' (Hamster) filter log
has lots of posts with long UTF-8 Subject: or/and From: headers.

Just one example:

Date: Fri, 27 Oct 2023 05:03:11 -0700 (PDT)
Message-ID: <90ff7f40-7b50-42d8-a1e2-31532bb5d108n@googlegroups.com>

> - sci.*: mostly sci.crypt, sometimes sci.lang, what's interesting I can't
> see sci.lang.japan anymore
>
> - soc.*: only soc.culture.punjab

HTH.

[...]

On 27.10.2023 17:31, Jakob Bohm wrote:

>What happened to the onslaught in comp.protocols.time.ntp, which has
>recently switched to latinized subject lines.

Probably, it meant a simple replacing Thai subject lines putting
instead ones with ads in Indonesian and in Malaysian. But all of
them referring to the same obsessive field: lottery, gaming, gambling
stuff (especially to slot machines and "wheel-of-fortune"-kind of
schemes). As well as betting/punting in several sports, esp.
football (soccer) championships. Hence UFA (i.e., UEFA) and FIFA,
contained in the long lists of ad wordings.

>All in all, this looks like a targeted attack with spammers eithe >uninterested in getting readers or tricked into participating in the
>attack

"Neither nor." Esp. since newsgroups with no relevance outside of
the Usenet are attacked with the crap, where other ones, heavily
loaded with daily political and religiou propaganda as well as
mad polemics are ignored by such deranged spammers.

The usual and relevant fruit of some cerebral trouble has nothing
to do with the Usenet (its purpose and "survival throes"), nor
with the real advertisements (for certain areas of activity/business)
nor with the rules, norms and logical intricacies of people who as
providers keep i.e. don't want to giv up such media and do the
maintenance thereof. But, of course, it is quite difficult to
detect this type of spam authorship in order to separate it
from possible kinds of "sabotage" actions by people "with agendas",
to which such free fora as still is this Usenet "must be" destroyed.

Lutz

Jakob Bohm <jb-usenet@wisemo.com.invalid> wrote:
>
>What happened to the onslaught in comp.protocols.time.ntp, which has
>recently switched to latinized subject lines.

That's a different spammer. It's Bhasa Indonesia, advertising some
sort of online gambling service.

>All in all, this looks like a targeted attack with spammers either
>uninterested in getting readers or tricked into participating in the
>attack

They have no interest in getting direct readers, they are only interested
in poisoning the Google search engine so that google searches find their
postings on Google Groups.
--scott
--
"C'est un Nagra. C'est suisse, et tres, tres precis."

On 29 Oct 2023 00:04:12 -0000
kludge@panix.com (Scott Dorsey) wrote:
> Jakob Bohm <jb-usenet@wisemo.com.invalid> wrote:
> >All in all, this looks like a targeted attack with spammers either
> >uninterested in getting readers or tricked into participating in the
> >attack
>
> They have no interest in getting direct readers, they are only interested
> in poisoning the Google search engine so that google searches find their
> postings on Google Groups.

I wonder if the spammers have any hope of achieving this. I would imagine
that Google cares about their search results being influenced even though it
doesn't care about usenet so Google must have measures in place against this
sort of thing. Perhaps the spammers care about influencing other search
engines (which they believe or hope to be less sophisticated) since some
websites reproduce in HTML form usenet content.

--
vlaho.ninja/menu

In article <WiW1C56Ku5aem21uD@bongo-ra.co>,
Spiros Bousbouras <spibou@gmail.com> wrote:
>On 29 Oct 2023 00:04:12 -0000
>kludge@panix.com (Scott Dorsey) wrote:
>> Jakob Bohm <jb-usenet@wisemo.com.invalid> wrote:
>> >All in all, this looks like a targeted attack with spammers either
>> >uninterested in getting readers or tricked into participating in the
>> >attack
>>
>> They have no interest in getting direct readers, they are only interested
>> in poisoning the Google search engine so that google searches find their
>> postings on Google Groups.
>
>I wonder if the spammers have any hope of achieving this. I would imagine
>that Google cares about their search results being influenced even though it
>doesn't care about usenet so Google must have measures in place against this
>sort of thing. Perhaps the spammers care about influencing other search
>engines (which they believe or hope to be less sophisticated) since some
>websites reproduce in HTML form usenet content.
>

As if Google cares!!

https://www.linkedin.com/feed/update/urn%3Ali%3Aactivity%3A7122352592692658177/?commentUrn=urn%3Ali%3Acomment%3A%28activity%3A7122352592692658177%2C7122915621796818945%29&dashCommentUrn=urn%3Ali%3Afsd%5Fcomment%3A%287122915621796818945%2Curn%3Ali%3Aactivity%3A7122352592692658177%29
>--
>vlaho.ninja/menu

--
Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising!
Look at Psalms 14 and 53 on Atheism ; unsubscribe from Google Groups to be seen
Those who are spreading confusion are not spreading truth. -unknown https://mindspring.com

In article <WiW1C56Ku5aem21uD@bongo-ra.co>,
Spiros Bousbouras <spibou@gmail.com> wrote:
>On 29 Oct 2023 00:04:12 -0000
>kludge@panix.com (Scott Dorsey) wrote:
>> Jakob Bohm <jb-usenet@wisemo.com.invalid> wrote:
>> >All in all, this looks like a targeted attack with spammers either
>> >uninterested in getting readers or tricked into participating in the
>> >attack
>>
>> They have no interest in getting direct readers, they are only interested
>> in poisoning the Google search engine so that google searches find their
>> postings on Google Groups.
>
>I wonder if the spammers have any hope of achieving this. I would imagine
>that Google cares about their search results being influenced even though it
>doesn't care about usenet so Google must have measures in place against this
>sort of thing. Perhaps the spammers care about influencing other search
>engines (which they believe or hope to be less sophisticated) since some
>websites reproduce in HTML form usenet content.

So far I don't think it's working very well, at least a google search on
"Black Magic In Karnatika" failed to find any of it. Have not tried other
engines.
--scott
--
"C'est un Nagra. C'est suisse, et tres, tres precis."

In article <uhlmjc$bh1$1@panix2.panix.com>,
Scott Dorsey <kludge@panix.com> wrote:
>In article <WiW1C56Ku5aem21uD@bongo-ra.co>,
>Spiros Bousbouras <spibou@gmail.com> wrote:
>>On 29 Oct 2023 00:04:12 -0000
>>kludge@panix.com (Scott Dorsey) wrote:
>>> Jakob Bohm <jb-usenet@wisemo.com.invalid> wrote:
>>> >All in all, this looks like a targeted attack with spammers either
>>> >uninterested in getting readers or tricked into participating in the
>>> >attack
>>>
>>> They have no interest in getting direct readers, they are only interested
>>> in poisoning the Google search engine so that google searches find their
>>> postings on Google Groups.
>>
>>I wonder if the spammers have any hope of achieving this. I would imagine
>>that Google cares about their search results being influenced even though it
>>doesn't care about usenet so Google must have measures in place against this
>>sort of thing. Perhaps the spammers care about influencing other search
>>engines (which they believe or hope to be less sophisticated) since some
>>websites reproduce in HTML form usenet content.
>
>So far I don't think it's working very well, at least a google search on
>"Black Magic In Karnatika" failed to find any of it. Have not tried other
>engines.
>--scott

Google GRoups disgrace themselves by not regulating spammers!

https://www.linkedin.com/feed/update/urn%3Ali%3Aactivity%3A7122352592692658177/?commentUrn=urn%3Ali%3Acomment%3A%28activity%3A7122352592692658177%2C7122915621796818945%29&dashCommentUrn=urn%3Ali%3Afsd%5Fcomment%3A%287122915621796818945%2Curn%3Ali%3Aactivity%3A7122352592692658177%29
>--
>"C'est un Nagra. C'est suisse, et tres, tres precis."

--
Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca
Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising!
Look at Psalms 14 and 53 on Atheism ; unsubscribe from Google Groups to be seen
Those who are spreading confusion are not spreading truth. -unknown https://mindspring.com

Scott Dorsey wrote:
> Jakob Bohm <jb-usenet@wisemo.com.invalid> wrote:
>>
>> What happened to the onslaught in comp.protocols.time.ntp, which has
>> recently switched to latinized subject lines.
>
> That's a different spammer. It's Bhasa Indonesia, advertising some
> sort of online gambling service.
>
>> All in all, this looks like a targeted attack with spammers either
>> uninterested in getting readers or tricked into participating in the
>> attack
>
> They have no interest in getting direct readers, they are only interested
> in poisoning the Google search engine so that google searches find their
> postings on Google Groups.
> --scott
>

Are newsgroups also being used to train AI?