I wonder if it would be good enough to use a public spam corpus built on volunteer contributions, while using only a private ham corpus.