<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: How To Analyze And Stop Comment Spam</title>
	<atom:link href="http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/</link>
	<description>Ramblings about art, education, culture and a lot more</description>
	<lastBuildDate>Wed, 26 Dec 2012 20:55:21 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: paul</title>
		<link>http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/comment-page-1/#comment-18674</link>
		<dc:creator>paul</dc:creator>
		<pubDate>Sun, 24 Jun 2007 07:22:00 +0000</pubDate>
		<guid isPermaLink="false">http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/#comment-18674</guid>
		<description><![CDATA[Hi Gordaen,
I checked Pidkey and what I saw is a little bit more than just a simple solution anti-spam. And ... my humble advice, the problem &quot;The major one that I see is email from non-humans that isnÃ¢â‚¬â„¢t spam&quot; is not a problem... because with that... spammers are out of service :-). I start to use it and I have no more spams :-) see you:-)]]></description>
		<content:encoded><![CDATA[<p>Hi Gordaen,<br />
I checked Pidkey and what I saw is a little bit more than just a simple solution anti-spam. And &#8230; my humble advice, the problem &#8220;The major one that I see is email from non-humans that isnÃ¢â‚¬â„¢t spam&#8221; is not a problem&#8230; because with that&#8230; spammers are out of service <img src='http://blog.gordaen.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> . I start to use it and I have no more spams <img src='http://blog.gordaen.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' />  see you:-)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Gordaen</title>
		<link>http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/comment-page-1/#comment-17281</link>
		<dc:creator>Gordaen</dc:creator>
		<pubDate>Fri, 15 Jun 2007 01:16:41 +0000</pubDate>
		<guid isPermaLink="false">http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/#comment-17281</guid>
		<description><![CDATA[I updated the link in your first post, so now they both work.  Pidkey sounds like a simple solution to email spam, but it seems like it has a few problems.  The major one that I see is email from non-humans that isn&#039;t spam.  For instance, I have scripts on my site that email me upon various events.  I would have to specifically create a contact in my address book for those scripts.  I also don&#039;t know that it could be used effectively for blogs.  It could be adapted to send out an email confirmation to each poster and store who is accepted, but that could generate a &lt;strong&gt;lot&lt;/strong&gt; of emails on a popular blog (mine receives an average of about 150 comment spam attempts a day, sometimes triple that, and my blog is certainly not a major one).

Another interesting solution that would be nice if more people used it is hashing.  Programs like &lt;a href=&quot;http://www.hashcash.org/&quot; rel=&quot;nofollow&quot;&gt;hashcash&lt;/a&gt; basically make the computer do some calculations in order to send an email.  Since humans don&#039;t type and send emails extremely fast, it&#039;s not a problem for us, but spammers wouldn&#039;t be able to do the calculations for the millions (or billions?) of messages sent.  Of course, then you run into problems with companies sending out legitimate newsletters.]]></description>
		<content:encoded><![CDATA[<p>I updated the link in your first post, so now they both work.  Pidkey sounds like a simple solution to email spam, but it seems like it has a few problems.  The major one that I see is email from non-humans that isn&#8217;t spam.  For instance, I have scripts on my site that email me upon various events.  I would have to specifically create a contact in my address book for those scripts.  I also don&#8217;t know that it could be used effectively for blogs.  It could be adapted to send out an email confirmation to each poster and store who is accepted, but that could generate a <strong>lot</strong> of emails on a popular blog (mine receives an average of about 150 comment spam attempts a day, sometimes triple that, and my blog is certainly not a major one).</p>
<p>Another interesting solution that would be nice if more people used it is hashing.  Programs like <a href="http://www.hashcash.org/" rel="nofollow">hashcash</a> basically make the computer do some calculations in order to send an email.  Since humans don&#8217;t type and send emails extremely fast, it&#8217;s not a problem for us, but spammers wouldn&#8217;t be able to do the calculations for the millions (or billions?) of messages sent.  Of course, then you run into problems with companies sending out legitimate newsletters.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mya</title>
		<link>http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/comment-page-1/#comment-17180</link>
		<dc:creator>mya</dc:creator>
		<pubDate>Thu, 14 Jun 2007 03:37:09 +0000</pubDate>
		<guid isPermaLink="false">http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/#comment-17180</guid>
		<description><![CDATA[Hi folks,

I saw, I gave you the wrong link, is  www.pidware.com/pidkey.php (without . at the end) If you are like me, I hate spam and now... I relax :-)

Mya]]></description>
		<content:encoded><![CDATA[<p>Hi folks,</p>
<p>I saw, I gave you the wrong link, is  <a href="http://www.pidware.com/pidkey.php" rel="nofollow">http://www.pidware.com/pidkey.php</a> (without . at the end) If you are like me, I hate spam and now&#8230; I relax <img src='http://blog.gordaen.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
<p>Mya</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mya</title>
		<link>http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/comment-page-1/#comment-17179</link>
		<dc:creator>mya</dc:creator>
		<pubDate>Thu, 14 Jun 2007 03:29:50 +0000</pubDate>
		<guid isPermaLink="false">http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/#comment-17179</guid>
		<description><![CDATA[Hi folks,

I use a spam blocker, the approach is different, it doesnÃ¢â‚¬â„¢t intend to analyse an email. This spam blocker uses a new pidkey technology. ItÃ¢â‚¬â„¢s too long to explain but you can see an explanation &lt;a href=&quot;http://www.pidware.com/pidkey.php&quot; rel=&quot;nofollow&quot;&gt;www.pidware.com/pidkey.php&lt;/a&gt;. The point is... the machine (computer) competes with human brain, computer no match with that. So maybe itÃ¢â‚¬â„¢s time to look  elsewhere.

Mya]]></description>
		<content:encoded><![CDATA[<p>Hi folks,</p>
<p>I use a spam blocker, the approach is different, it doesnÃ¢â‚¬â„¢t intend to analyse an email. This spam blocker uses a new pidkey technology. ItÃ¢â‚¬â„¢s too long to explain but you can see an explanation <a href="http://www.pidware.com/pidkey.php" rel="nofollow">http://www.pidware.com/pidkey.php</a>. The point is&#8230; the machine (computer) competes with human brain, computer no match with that. So maybe itÃ¢â‚¬â„¢s time to look  elsewhere.</p>
<p>Mya</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Gordaen</title>
		<link>http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/comment-page-1/#comment-15782</link>
		<dc:creator>Gordaen</dc:creator>
		<pubDate>Fri, 01 Jun 2007 04:48:02 +0000</pubDate>
		<guid isPermaLink="false">http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/#comment-15782</guid>
		<description><![CDATA[Thanks for the kind comment, Brian.  I&#039;m glad you found the article helpful.

CAPTCHA&#039;s are definitely one of the most commonly used solutions because they&#039;re so easy.  Unfortunately, there are some significant problems with them.  Vision-impaired users can&#039;t use them, people using command line browsers (e.g., &lt;a href=&quot;http://lynx.browser.org/&quot; rel=&quot;nofollow&quot;&gt;Lynx&lt;/a&gt;) can&#039;t see them, and small, and portable devices often cannot use them (e.g., phones and PDA&#039;s which might have too small of screens, too low of resolution, or may even have images disabled to save bandwidth/memory).  I also see people who implement CAPTCHA&#039;s incorrectly, using an obvious &lt;a href=&quot;http://en.wikipedia.org/wiki/Hash_function&quot; rel=&quot;nofollow&quot;&gt;hash&lt;/a&gt; that can be cracked by a computer faster than a real user can type in the image&#039;s characters.]]></description>
		<content:encoded><![CDATA[<p>Thanks for the kind comment, Brian.  I&#8217;m glad you found the article helpful.</p>
<p>CAPTCHA&#8217;s are definitely one of the most commonly used solutions because they&#8217;re so easy.  Unfortunately, there are some significant problems with them.  Vision-impaired users can&#8217;t use them, people using command line browsers (e.g., <a href="http://lynx.browser.org/" rel="nofollow">Lynx</a>) can&#8217;t see them, and small, and portable devices often cannot use them (e.g., phones and PDA&#8217;s which might have too small of screens, too low of resolution, or may even have images disabled to save bandwidth/memory).  I also see people who implement CAPTCHA&#8217;s incorrectly, using an obvious <a href="http://en.wikipedia.org/wiki/Hash_function" rel="nofollow">hash</a> that can be cracked by a computer faster than a real user can type in the image&#8217;s characters.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Brian Buffington</title>
		<link>http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/comment-page-1/#comment-15749</link>
		<dc:creator>Brian Buffington</dc:creator>
		<pubDate>Thu, 31 May 2007 23:15:52 +0000</pubDate>
		<guid isPermaLink="false">http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/#comment-15749</guid>
		<description><![CDATA[This article is fantastic! Before this I was strongly leaning towards integrating a CAPTCHA into my custom CMS, but your points approach brings up some new ideas. I&#039;m definitely going to take a look at my pages and see how I can integrate some of these great suggestions. Thanks again!]]></description>
		<content:encoded><![CDATA[<p>This article is fantastic! Before this I was strongly leaning towards integrating a CAPTCHA into my custom CMS, but your points approach brings up some new ideas. I&#8217;m definitely going to take a look at my pages and see how I can integrate some of these great suggestions. Thanks again!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Gordaen</title>
		<link>http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/comment-page-1/#comment-15677</link>
		<dc:creator>Gordaen</dc:creator>
		<pubDate>Thu, 31 May 2007 16:57:12 +0000</pubDate>
		<guid isPermaLink="false">http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/#comment-15677</guid>
		<description><![CDATA[A custom CMS like yours usually lasts a bit longer against the spammers, but eventually someone will have too much time on their hands and create a script for it as well.  At first, it&#039;s easy to stop these spams by blocking keywords, excessive links, or other obvious patterns, but someone out there will be just as interested in circumventing your countermeasures as you are in stopping their spam.

Hopefully this excessively long post will help you (and others) when the spammers become a bit more sophisticated.  In some ways, it&#039;s good that there are so many easy targets (keeps their eyes off the more challenging sites to spam), but I wonder how much those sites encourage these people...

One thing I didn&#039;t mention is that you can also shut down a lot of spammer&#039;s sites.  Oftentimes, they use sites like &lt;a href=&quot;http://www.jubiiblog.co.uk/&quot; rel=&quot;nofollow&quot;&gt;JubiiBlog&lt;/a&gt; where they can quickly set up a page with spam advertisements or JavaScript forwarding, and you can simply contact the support team with the offending sites.  I&#039;ve done that quite a bit in the past few weeks while analyzing spam I receive through my comment form, and I can only hope it irritates the spammer.  It takes a lot less time to find a customer support email address and forward on the spam sites than it does for them to find new sites that are vulnerable to their techniques.]]></description>
		<content:encoded><![CDATA[<p>A custom CMS like yours usually lasts a bit longer against the spammers, but eventually someone will have too much time on their hands and create a script for it as well.  At first, it&#8217;s easy to stop these spams by blocking keywords, excessive links, or other obvious patterns, but someone out there will be just as interested in circumventing your countermeasures as you are in stopping their spam.</p>
<p>Hopefully this excessively long post will help you (and others) when the spammers become a bit more sophisticated.  In some ways, it&#8217;s good that there are so many easy targets (keeps their eyes off the more challenging sites to spam), but I wonder how much those sites encourage these people&#8230;</p>
<p>One thing I didn&#8217;t mention is that you can also shut down a lot of spammer&#8217;s sites.  Oftentimes, they use sites like <a href="http://www.jubiiblog.co.uk/" rel="nofollow">JubiiBlog</a> where they can quickly set up a page with spam advertisements or JavaScript forwarding, and you can simply contact the support team with the offending sites.  I&#8217;ve done that quite a bit in the past few weeks while analyzing spam I receive through my comment form, and I can only hope it irritates the spammer.  It takes a lot less time to find a customer support email address and forward on the spam sites than it does for them to find new sites that are vulnerable to their techniques.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Bernie Zimmermann</title>
		<link>http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/comment-page-1/#comment-15572</link>
		<dc:creator>Bernie Zimmermann</dc:creator>
		<pubDate>Thu, 31 May 2007 04:22:22 +0000</pubDate>
		<guid isPermaLink="false">http://blog.gordaen.com/2007/05/30/how-to-analyze-and-stop-comment-spam/#comment-15572</guid>
		<description><![CDATA[This is an awesome list, Ian.  I&#039;m not quite to the point where I&#039;m ready for a points system at my blog, but I can certainly see the merit in such an approach.  Thanks for posting such a thorough list of spam countermeasures.  I&#039;m sure I&#039;ll be revisiting this post in the future (unfortunately).]]></description>
		<content:encoded><![CDATA[<p>This is an awesome list, Ian.  I&#8217;m not quite to the point where I&#8217;m ready for a points system at my blog, but I can certainly see the merit in such an approach.  Thanks for posting such a thorough list of spam countermeasures.  I&#8217;m sure I&#8217;ll be revisiting this post in the future (unfortunately).</p>
]]></content:encoded>
	</item>
</channel>
</rss>
<!-- WP Super Cache is installed but broken. The path to wp-cache-phase1.php in wp-content/advanced-cache.php must be fixed! -->