[FoRK] Freely Available Filtering Systems, Information Filtering Resources

Tony Finch < dot at dotat.at > on > Thu Nov 9 10:14:19 PST 2006

On Thu, 9 Nov 2006, Ken Meltsner wrote:
>
> I've been trying to think of a good way to determine whether a message
> is phishing, although URLs for servers with numeric addresses or in
> the Czech Republic are usually a reliable indicator....

A fairly practical technique is to spot links like
<a href="http://phishersite.com">http://legitsite.com</a>
but you need a whitelist for legitimate mailings with bad URL hygeiene.

You also need a URIBL system to deal with links that are not
self-evidently underhand.

Tony.
-- 
f.a.n.finch  <dot at dotat.at>  http://dotat.at/
HEBRIDES BAILEY FAIR ISLE FAEROES: SOUTH VEERING WEST 5 TO 7, INCREASING 7 TO
SEVERE GALE 9, PERHAPS STORM 10 LATER IN BAILEY. ROUGH TO VERY ROUGH, BECOMING
HIGH, OCCASIONALLY VERY HIGH IN BAILEY. RAIN THEN SQUALLY SHOWERS. MODERATE OR
GOOD.

More information about the FoRK mailing list