Bypassing Gmail's spam filters with ChatGPT

Using these tools to mitigate spam is as likely a scenario as this, imagine that every spam mail receives a masterfully crafted response showing utter fascination and interest in SEO, or helping out a Nigerian prince. Every phone call to an unregistered number is answered by an artificial, frail, and forgetful lady that is trying her best to register gift cards.<p>When reporting an e-mail as spam it will not only block the address but waste the spammers time, rendering the actions unprofitable.

&gt; I’m no AI or machine learning expert so I don’t know how it works. But I am also worried that spammers could use ChatGPT to get around Gmail and Outlook’s spam filters.<p>This will not only increase the spam-problem, but will most likely be used to scale and do targeted phishing attack as well. I wrote an extensive article[0] where I analyzed this. And to no surprise, GPT-3 can be used to generate dynamic phishing campaigns on the fly in multiple languages, classify email responses, improve email thread hijacking attacks etc.<p>[0] <a href="https:&#x2F;&#x2F;www.xorlab.com&#x2F;en&#x2F;blog&#x2F;why-ai-powered-phishing-will-become-a-serious-security-issue-for-your-organization" rel="nofollow">https:&#x2F;&#x2F;www.xorlab.com&#x2F;en&#x2F;blog&#x2F;why-ai-powered-phishing-will-...</a>

People are overestimating the importance of the message body in spam classification. The stuff that appears in your spam label on gmail is what google considered marginal, almost ham. The vast, vast majority of what they think is spam is rejected with temporary failure codes at SMTP time and never gets delivered with any label. IP reputation and other related metadata features are the key features in spam classification, and repeatedly sending different messages is not a valid test of whether the body looks spammy or not.

As I have said before, the future will have two kinds of AI everywhere.<p><i>Their AI</i> to get you to buy something, do something, believe something, or in a warzone to kill you and <i>Your AI</i> to protect you from <i>Their AI</i>. Reality may even become so dangerous and illusory that humans lose a lot of their agency to <i>Your AI</i>.

All this can be done since GPT3 API has been available.<p>I see a lot of people thinking chatgpt is something new capable of such stuff but GPT3 is far less restrictive and has been able to do all this for almost an year now.

Is it finally time for Hashcash[1]&#x2F;PennyPost[2]?<p>[1] <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Hashcash" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Hashcash</a><p>[2] <a href="https:&#x2F;&#x2F;pennypost.sourceforge.net&#x2F;PennyPost" rel="nofollow">https:&#x2F;&#x2F;pennypost.sourceforge.net&#x2F;PennyPost</a>

AFAIK all it takes to bypass Gmails spam filters is to resend the same scammy email that was Flagged but using a different email address. I get the same kind of scammy emails, flag them as spam, and then a couple days later, Gmail lets the same email in though it is coming from a different 123134r12345124@blahblah.com address.

Anecdotally, almost every email I see in my gmail inbox is advertisement of some sort. There&#x27;s newsletters I never signed up for, special offers from companies I&#x27;ve never had dealings with, it never ends.<p>Some of it hasn&#x27;t even been sent to me as an email, but shows up in the inbox as though it was an email.<p>Granted, there&#x27;s fewer scam emails than in my non-gmail inbox, but man is there a lot of spam.

If we thought the signal vs noise problem was bad, wait until 90% of data is banal AI drivel drowning out any semblance of authenticity.<p>Boring, brown, homogeneous noise

well, you don&#x27;t need ChatGPT for that. I receive daily scam in my gmail with 99% the same content each time (and i mark it spam each time)... the worst part ? the server serving it is google (but the email attached to it is always a different obscure email)

I must be in the extreme minority upon reading comments on email spam, as I almost never receive a spam message in my main gmail inbox that is truly spam and not something I&#x27;m getting an email for because I lazily opted-in to a mailing list or was put on one due to association with a product. Actual, oldschool spam (Nigerian princes, claim your prize etc) literally never gets to my inbox. Maybe I&#x27;m just not a popular person. Or maybe I&#x27;ve kept my email private enough that it doesn&#x27;t get scraped for such things? I don&#x27;t understand the discrepancy between my experience and so many others here.

On the other hand it&#x27;s easy to detect ChatGPT, at least for now <a href="https:&#x2F;&#x2F;huggingface.co&#x2F;openai-detector" rel="nofollow">https:&#x2F;&#x2F;huggingface.co&#x2F;openai-detector</a>

I don&#x27;t think message content is weighted very heavily in modern spam filters...<p>Things like IP reputation, sender reputation, and various SPF-like headers are far more important.

Interpretations I&#x27;ve seen of ChatGPT type tools, and playing around with it, I would sum up as &quot;reducing the marginal cost of creating BS to $0&quot;. Great for content farms, spam, disinfo&#x2F;propaganda campaigns.<p>Stuff where it doesn&#x27;t have to be correct, have a high hit rate, or even be edited. Just need to produce plausible enough sounding, human-like content.

Think what can be done with an AI trained on all the data that&#x27;s been collected about you.

I think the future model of email will be spam-by-default, where you whitelist senders as you need them.<p>Already doing that with hey email [0] where you screen all incoming senders.<p>[0] <a href="https:&#x2F;&#x2F;hey.com" rel="nofollow">https:&#x2F;&#x2F;hey.com</a>

Considering how much crap I get in my Gmail inbox, doesn’t seem like it’s a hard task. Seriously, my Gmail account is borderline useless nowadays.

If you want to spam gmail you can just share documents with people or add events to their calendar. Apparently there&#x27;s no way to stop this.

I don’t think ChatGPT is really needed here.<p>Gmail’s spam filters are Google’s weakest tech. At least I don’t know of anything worse.

This is about all its&#x27; good for, it won&#x27;t even write sexy fan fiction for me

Whoever is doing this, please stop. Thank you.

only way to make email work is to let the user choose what domain they trust, and maybe to have a feature where the user must whitelist addresses.