It's surprisingly easy for spammers to defeat Bayesian spam filters.