Re: Request: Limit LSM postings to subscribers!

From: Crispin Cowan (crispinat_private)
Date: Mon Sep 08 2003 - 13:40:05 PDT

  • Next message: Chris Wright: "Re: [PATCH] Pass nameidata to security_inode_permission (Was: Re: path_post_lookup)"

    David Wheeler wrote:
    
    > I  would like to see that LSM postings permitted only by subscribers.
    > We're getting WAY too many spam messages, and I
    > think it will get worse.  Subscribing is a simple process - it's
    > a small price to pay for posting.  Besides, many other lists require
    > subscription before posting, so this won't be an unusual requirement.
    > That, plus other filters, should keep things to a dull roar. 
    
    LSM is currently under massive attack by Sobig.F. Last week we adjusted 
    our spam filters to specifically look for Sobig & friends, and now we're 
    having to hand-moderate hundreds of virus posts and virus-spawned bounces.
    
    If we went to manual moderation for non-subscriber posts, there would be 
    a significant risk of the humans in the loop mis-classifying legitimate 
    posts as junk and rejecting them.
    
    I'm really sorry that the spam filters are not so good lately. But this 
    is not a local LSM problem; it is global. Spam filters are fundamentally 
    a kludge, and the spammers are figuring out how to game them.
    
    Crispin
    
    -- 
    Crispin Cowan, Ph.D.           http://immunix.com/~crispin/
    Chief Scientist, Immunix       http://immunix.com
                http://www.immunix.com/shop/
    
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Mon Sep 08 2003 - 13:42:37 PDT