Path: ...!eternal-september.org!feeder3.eternal-september.org!usenet.ovh!faq.usenet.ovh!.POSTED!not-for-mail
From: "faq" <faq@usenet.ovh>
Newsgroups: news.admin.net-abuse.usenet,news.answers
Subject: [DOC] NoCeM - What you need to know
Followup-To: news.admin.net-abuse.usenet
Date: Thu, 1 Aug 2024 17:42:09 -0000 (UTC)
Organization: NUO - News.Usenet.Ovh
Approved: faq@usenet.ovh
Message-ID: <faqbot-fr.45505.8209265857@usenet.ovh>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Thu, 1 Aug 2024 17:42:09 -0000 (UTC)
Injection-Info: faq.usenet.ovh; posting-account="faq";
	logging-data="632465"; mail-complaints-to="abuse@usenet.ovh"
Cancel-Lock: sha256:Yp1W6/Myxjn5TpVY/5kXhm4F2aA215I+yKXVE/abGiA=
Bytes: 5907
Lines: 183

Contents :
 	1 - Preamble
 	2 - Definition of NoCeM
 	3 - NoCeM or Cancel?
 	4 - Nocem issuers
 	5 - Descriptions and tips on existing nocems
 	6 - Conclusion
 	7 - References



1 - Preamble

This document, posted monthly, list the nocems currently published
on the "news.lists.filters" group.
It does not deal with nocems published in a local hierarchy.
The aim is to publicize existing general nocems so that server
administrators can decide which nocems they wish to apply or not.


2 - Definition

NoCeM (pronounced No See 'Em) is a modern solution for managing spam.

Rather than issuing a "cancel" on a spam message that most servers will
reject, we generate a message in the "news.lists.filters" group called
"nocem", which contain the message(s) to be deleted.

Each nocem is signed with a gpg key to guarantee its authenticity.

The News administrators of each server is free to apply these nocems or not,
unlike global cancels, nothing is imposed.



3 - NoCeM or Cancel?

- Using nocems requires the server administrator to modify its configuration
  to accept them. Otherwise, the nocem does nothing on the server.
  It's a simple text message.

- Cancel, on the other hand, is accepted by default by the server
  configuration. It's up to the server administrator to modify his config
  to refuse certain types of cancels. This is not always easy for servers
  with little administration or little knowledge of "fr" specificities.

Reminder: general NoCeMs are published in news.lists.filters.



4 - Nocem issuers

- " bleachbot " <bleachbot@httrack.com>

- " nocembot " <nocem@usenet.ovh>

- <nocem@eternal-september.org>

- " nono le petit robot " <robot@pasdenom.info>

- " i2pn2-nocem " <i2pn2-nocem@i2pn2.org>

- "news.chmurka.net nocembot" <nocem@chmurka.net>




5 - Descriptions and tips for existing nocems


5.1 - " bleachbot "

Information : http://home.httrack.net/~nocem/

Public key : http://home.httrack.net/~nocem/bleachbot.asc

Types of nocems :
- spam : detection based on previously confirmed spam with BI>=20.
- site : flood and hipcrime detection.

Tip: Nocem has been a recognized source for years.
Recommended for use on all servers.

This robot seems to have stopped since January 1, 2024


5.2 - " nocembot "

Information : http://usenet.ovh/?article=nocem

Public key : http://usenet.ovh/files/alfanet_0x5789E33A_public

Types of nocems :
 - spam : spams and clearly malicious articles
 - flood : well-known regular flooders

Tip: New public Nocems source since June 5, 2023
(previously restricted to the news.usenet.ovh server).
The website details what is filtered.
Recommended for use on all servers.


5.3 - nocem@eternal-september.org

Information : https://www.eternal-september.org/index.php?showpage=nocem

Public key : : https://www.eternal-september.org/nocem-eternal-september.asc

Les types de nocems :
 - spam : drugs/meds/cards/casino from GoogleGroups
  - bot : bot generated pseudo discussions from various sources
         (currently from Abavia).

Tip : New public Nocems source since septembre 25, 2023
Recommended use of on all servers.


5.4 - " nono le petit robot "

Information : https://pasdenom.info/nocem.html

Public key : http://pasdenom.info/gpg/robot.pasdenom.asc

Types of nocems :
 - spam : spams 99,99%
 - spam2 : spams with rare false positives
 - spam3 : spam with false positives
 - spam4 : spams with slightly more false positives
 - site : rare manual notices

Tip: these nocems are the result of the use of "spamassasin".
An effective product usually used to detect spam in emails.
Here, the sample used to train the robot to detect spam seems
to be poorly done: too much false positives for spam.
Other types of nocem generate inappropriate false positives.
In particular spam3 and 4, which on some forums, such as fr.soc.politique,
could be seen as censorship.
The "site" nocem is used for abuse that is generally consensual.




5.5 - " i2pn2-nocem " <i2pn2-nocem@i2pn2.org>

Information : ?

Public key : https://www.novabbs.com/hierarchy/i2pn2-nocem.txt

Types of nocems :
 - spam : These bot-spam NoCeM notices may cover any hierarchy and
          are automatically generated by a spamassassin script.

Tip : Recommended use of on all servers.



5.6 - "news.chmurka.net nocembot" <nocem@chmurka.net>

Information : http://news.chmurka.net/nocem.php

Public key : http://news.chmurka.net/nocem-chmurka.asc

Types of nocems :
  - thai : NoCeM notice for Thai flood originating from Google Groups.

Tip : Recommended use of on all servers.




6 - Conclusion

If you want to contribute to this document, you can reply directly
to this message (or by e-mail if you prefer).



7 - References:
- The NoCeM FAQ. V0.93: http://www.cm.org/faq.html
- Kleopatra: https://www.openpgp.org/software/kleopatra/
  (certificate manager and GUI for GnuP)
========== REMAINDER OF ARTICLE TRUNCATED ==========