Rocksolid Light

Welcome to Rocksolid Light

mail  files  register  newsreader  groups  login

Message-ID:  

"Life sucks, but death doesn't put out at all...." -- Thomas J. Kopp


computers / news.admin.net-abuse.usenet / [DOC] NoCeM - What you need to know

SubjectAuthor
o [DOC] NoCeM - What you need to knowfaq

1
[DOC] NoCeM - What you need to know

<faqbot-fr.45383.9605814931@usenet.ovh>

  copy mid

https://news.novabbs.org/computers/article-flat.php?id=5322&group=news.admin.net-abuse.usenet#5322

  copy link   Newsgroups: news.admin.net-abuse.usenet news.answers
Followup: news.admin.net-abuse.usenet
Path: i2pn2.org!i2pn.org!newsfeed.bofh.team!weretis.net!feeder8.news.weretis.net!usenet.ovh!faq.usenet.ovh!.POSTED!not-for-mail
From: faq@usenet.ovh (faq)
Newsgroups: news.admin.net-abuse.usenet,news.answers
Subject: [DOC] NoCeM - What you need to know
Followup-To: news.admin.net-abuse.usenet
Date: Mon, 1 Apr 2024 21:03:14 -0000 (UTC)
Organization: NUO - News.Usenet.Ovh
Approved: faq@usenet.ovh
Message-ID: <faqbot-fr.45383.9605814931@usenet.ovh>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 1 Apr 2024 21:03:14 -0000 (UTC)
Injection-Info: faq.usenet.ovh; posting-account="faq";
logging-data="1402836"; mail-complaints-to="abuse@usenet.ovh"
Cancel-Lock: sha256:2csMbJiwCoMvp/PygTE9vgPsA38HOWwT9+zJFMP0aew=
 by: faq - Mon, 1 Apr 2024 21:03 UTC

Contents :
1 - Preamble
2 - Definition of NoCeM
3 - NoCeM or Cancel?
4 - Nocem issuers
5 - Descriptions and tips on existing nocems
6 - Conclusion
7 - References

1 - Preamble

This document, posted monthly, list the nocems currently published
on the "news.lists.filters" group.
It does not deal with nocems published in a local hierarchy.
The aim is to publicize existing general nocems so that server
administrators can decide which nocems they wish to apply or not.

2 - Definition

NoCeM (pronounced No See 'Em) is a modern solution for managing spam.

Rather than issuing a "cancel" on a spam message that most servers will
reject, we generate a message in the "news.lists.filters" group called
"nocem", which contain the message(s) to be deleted.

Each nocem is signed with a gpg key to guarantee its authenticity.

The manager of each server is free to apply these nocems or not,
unlike global cancels, nothing is imposed.

3 - NoCeM or Cancel?

- Using nocems requires the server administrator to modify its configuration
to accept them. Otherwise, the nocem does nothing on the server.
It's a simple text message.

- Cancel, on the other hand, is accepted by default by the server
configuration. It's up to the server administrator to modify his config
to refuse certain types of cancels. This is not always easy for servers
with little administration or little knowledge of "fr" specificities.

Reminder: general NoCeMs are published in news.lists.filters.

4 - Nocem issuers

- " bleachbot " <bleachbot@httrack.com>

- " nocembot " <nocem@usenet.ovh>

- <nocem@eternal-september.org>

- " nono le petit robot " <robot@pasdenom.info>

- " i2pn2-nocem " <i2pn2-nocem@i2pn2.org>

- "news.chmurka.net nocembot" <nocem@chmurka.net>

5 - Descriptions and tips for existing nocems

5.1 - " bleachbot "

Information : http://home.httrack.net/~nocem/

Public key : http://home.httrack.net/~nocem/bleachbot.asc

Types of nocems :
- spam : detection based on previously confirmed spam with BI>=20.
- site : flood and hipcrime detection.

Tip: Nocem has been a recognized source for years.
Recommended for use on all servers.

This robot seems to have stopped since January 1, 2024

5.2 - " nocembot "

Information : http://usenet.ovh/?article=nocem

Public key : http://usenet.ovh/files/alfanet_0x5789E33A_public

Types of nocems :
- spam : spams and clearly malicious articles
- flood : well-known regular flooders

Tip: New public Nocems source since June 5, 2023
(previously restricted to the news.usenet.ovh server).
The website details what is filtered.
Recommended for use on all servers.

5.3 - nocem@eternal-september.org

Information : https://www.eternal-september.org/index.php?showpage=nocem

Public key : : https://www.eternal-september.org/nocem-eternal-september.asc

Les types de nocems :
- spam : drugs/meds/cards/casino from GoogleGroups
- bot : bot generated pseudo discussions from various sources
(currently from Abavia).

Tip : New public Nocems source since septembre 25, 2023
Recommended use of on all servers.

5.4 - " nono le petit robot "

Information : https://pasdenom.info/nocem.html

Public key : http://pasdenom.info/gpg/robot.pasdenom.asc

Types of nocems :
- spam : spams 99,99%
- spam2 : spams with rare false positives
- spam3 : spam with false positives
- spam4 : spams with slightly more false positives
- site : rare manual notices

Tip: these nocems are the result of the use of "spamassasin".
An effective product usually used to detect spam in emails.
Here, the sample used to train the robot to detect spam seems
to be poorly done: too much false positives for spam.
Other types of nocem generate inappropriate false positives.
In particular spam3 and 4, which on some forums, such as fr.soc.politique,
could be seen as censorship.
The "site" nocem is used for abuse that is generally consensual.

5.5 - " i2pn2-nocem " <i2pn2-nocem@i2pn2.org>

Information : ?

Public key : https://www.novabbs.com/hierarchy/i2pn2-nocem.txt

Types of nocems :
- spam : These bot-spam NoCeM notices may cover any hierarchy and
are automatically generated by a spamassassin script.

Tip : Recommended use of on all servers.

5.6 - "news.chmurka.net nocembot" <nocem@chmurka.net>

Information : http://news.chmurka.net/nocem.php

Public key : http://news.chmurka.net/nocem-chmurka.asc

Types of nocems :
- thai : NoCeM notice for Thai flood originating from Google Groups.

Tip : Recommended use of on all servers.

6 - Conclusion

If you want to contribute to this document, you can reply directly
to this message (or by e-mail if you prefer).

7 - References:
- The NoCeM FAQ. V0.93: http://www.cm.org/faq.html
- Kleopatra: https://www.openpgp.org/software/kleopatra/
(certificate manager and GUI for GnuP)
- Global cancels: <news:m25ylayonf.fsf@raybanana.net>

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor