New Spam Protection Plug-Ins

I just completed installation of a new WordPress plug-in to protect this blog from comment spam and another plug-in to protect against trackback spam.

I am now using Math Comment Spam Protection Plug-in which adds an additional input field to the comment area where you have to do a basic maths equation in order to approve your comment. I have no idea how effective this will be but the claim is that it protects against all non-human comment spam. It’s certainly a simple solution and I hope it works well.

I’m sorry if your basic math is not good - you might need to have a calculator handy if you want to comment on my blog :).

This replaces the Spam Karma plug-in I was using, which wasn’t too bad at catching spam, however I wasn’t too happy with the captcha process and some spam was getting through every day.

I also installed the Trackback Validator plug-in which protects my blog from malicious trackbacks.

Thanks to SeoPedia for the heads-up about these plug-ins.


Forward to Friend

Email a copy of this article to a friend

* Required Field



Separate multiple entries with a comma. Maximum 5 entries.



Separate multiple entries with a comma. Maximum 5 entries.

Loading ... Loading ...

 

Add your comment

28 Comments

MyAvatars 0.2

I don’t see this as being very effective. Since the math is in html and not an image it would be easy to create an application to do the math as it autosubmits the spam.
Akismet works like a charm for me.

Comment by Jon @ 2006-10-31 15:41:08
 
MyAvatars 0.2

The ones I like the best are the ones that show you a coloured box and ask you to describe what colour it is :)
4+7 is 11 right?!

Comment by Jamsi @ 2006-10-31 15:47:12
 
MyAvatars 0.2

I’m also very happy with Askimet, though it does let the random spam comment through once in a while. As far as impenetrable captchas go, however, http://www.hotcaptcha.com/ is pretty hacker safe ;)

Comment by Flee The Cube @ 2006-10-31 17:10:20
 
MyAvatars 0.2

I don’t see this as being very effective. Since the math is in html and not an image it would be easy to create an application to do the math as it autosubmits the spam.

But due to the variability of the answer it makes it a programmatically difficult thing to do so is in fact quite a good filter.

The ones I like the best are the ones that show you a coloured box and ask you to describe what colour it is

And what if you’re colour blind or can’t see?

Comment by Ed @ 2006-10-31 21:54:17
 
MyAvatars 0.2

Good thing you’re letting readers know about this - I’ve never seen the math validator so I’d be wondering what it was otherwise…

Comment by Sucker @ 2006-10-31 22:26:32
 
MyAvatars 0.2

But due to the variability of the answer it makes it a programmatically difficult thing to do so is in fact quite a good filter.

What variability? Every computer on earth can solve a simple addition question…it doesn’t matter that the numbers change, it is still a + b = c and this puzzle can be solved by a computer with 100% accuracy. That’s why they went to the image type human verification systems.

Read the requirements for a good CAPTCHA, this system does not meet them.

Comment by Jon @ 2006-11-01 00:30:56
 
MyAvatars 0.2

Well, I use this one as well, and ever since I implemented it I have not seen any spam. I guess it is true that any computer can get a + b and add the numbers with complete accuracy, but it would have to be intelligent and ALL websites would have to have “Sum of a + b ?” so that they can scan that. I could just change to Addition and take away the question mark. Make it to where they still have to guess. But great point on that. I had not considered that, and I am a programmer.

Comment by Francisco H. Perez @ 2006-11-01 00:56:01
 
MyAvatars 0.2

I use a combination of things, but the biggest spam protection I use is the worst offendors extension to Akismet from http://boakes.org/ that will give you a list of frequent spammers.

If I see the same IP address more than once in my frequent spammers list, then I add that IP address to deny access to my website. It’s cut my spam attempts on my site to about 5% of what they were before I started doing that.

Comment by Blaine Moore (Run to Win) @ 2006-11-01 01:30:07
 
MyAvatars 0.2

I have no idea how effective this plug-in will be but I will give it a go and see what happens. If no luck back to Akismet and I’ll try that extension suggestion from Blaine too.

Comment by Yaro @ 2006-11-01 02:18:10
 
MyAvatars 0.2

What variability? Every computer on earth can solve a simple addition question…it doesn’t matter that the numbers change, it is still a + b = c and this puzzle can be solved by a computer with 100% accuracy. That’s why they went to the image type human verification systems.

Obviously, but that’s not the point. Most common blogging systems have a script that captures free form text in a fairly predictable format. Adding a non-free form text requirement to a commenting system with a unique form name makes it a more difficult process. What it then means is that the spam harvester can only attack the comments form with a direct scrape of the form every time. This isn’t productive from a spamming point of view so harvesters tend to deal with default installations of the usual suspects such as MT, WP, TP etc because they know the fields in advance.

Read the requirements for a good CAPTCHA, this system does not meet them.

Whichever way you slice it, image based captcha isn’t accessible. Screen selectable/readable text is.

I use a JavaScript system which looks for keystrokes before posting. It also has a noscript fallback to email comments to me. I have successfully eliminated spam 100%. It’s also degradable, functional and should be accessible.

Comment by Ed @ 2006-11-01 04:12:12
 
MyAvatars 0.2

What it then means is that the spam harvester can only attack the comments form with a direct scrape of the form every time

Or, once the plugin is better known, submit each comment 20 times with mcspvalue=1, 2, 3 etc. No scrape required.
I see it as a temporary ploy until enough people are using it so that it becomes “profitable” to add it to the spam submission applications.

I use a JavaScript system which looks for keystrokes before posting

Brilliant, where do I get it?

Comment by Jon @ 2006-11-01 04:39:40
 
MyAvatars 0.2

I see it as a temporary ploy until enough people are using it so that it becomes “profitable” to add it to the spam submission applications.

That’s its downfall. It’s an arms race.

Brilliant, where do I get it?

Unfortunately, it’s a hybrid of a Movable Type plugin available at MT Keystrokes but in principle it’s easy to port if you know your PHP and JavaScript.

Comment by Ed @ 2006-11-01 04:50:45
 
MyAvatars 0.2

Since the math is in html and not an image it would be easy to create an application to do the math as it autosubmits the spam.

You would not believe how easy it is to fool captcha’s. There are at least 5 scripts on my HDD that can identify any Vbulletin/Wordpress/Phpbb etc type of captcha’s.

Until spammers find a way to make that math parsing and calculation script, I am having 0 spam comments in my blog.

I have about 50.000 comments caught by Akismet in 8 months. My friend Lorien at Search Engine Journal has about 890.000. After the mat comment , there are .. like .. 0 :-)
I don’t usually recommend things that don’t work.

Yanis, did you receive any (and I mean ANY) spam comment since you installed this plugin here or at Small Business Branding ?

Comment by Cristian Mezei @ 2006-11-01 09:20:21
 
MyAvatars 0.2

I have seen people like Matt Cutts using the maths plug-in for quite some time, so I guess it should be effective. In Wordpress options (discussion) you can prevent others from pingbacks and trackbacks - so there is no really need of any plugin to do that.

Comment by Google Success @ 2006-11-01 23:22:33
 
MyAvatars 0.2

The only spam getting through is from a damn breast enlargement spammer - this one got through Spam Karma too - I’m going to ban the IP.

Besides that - all good!

However, one MAJOR difference - I woke up to 24 comments that required approval, 15 of which were legitimate comments. I have not had that many over night in a long time and I’m beginning to think that Spam Karma may have deleted A LOT of my legitimate comments in the past.

I am now convinced that I’m probably missing hundreds, if not thousands of LEGITIMATE comments from the past 6 months or so I have been using Spam Karma. That makes me sad :(

Comment by Yaro @ 2006-11-02 03:00:40
 
MyAvatars 0.2

It’s all good now. Just go and cry yourself to sleep, and come back tomorrow strong :-)

Comment by Cristian Mezei @ 2006-11-02 03:53:19
 
MyAvatars 0.2

I am now convinced that I’m probably missing hundreds, if not thousands of LEGITIMATE comments from the past 6 months or so I have been using Spam Karma.

Bad karma for Spam Karma :)

Comment by Jon @ 2006-11-02 03:54:52
 
MyAvatars 0.2

I use the default plugin akismet that comes with wordpress. It is good enough for me as of now as I don’t receive so much spam. But sometimes it flags my own comments as spam :)

Comment by Google Success @ 2006-11-02 23:54:36
 
MyAvatars 0.2

I think the Image verification is the best option as Jamsi suggested. This one also may work, but it can be passed by spammer.

Comment by Vans @ 2006-11-03 16:53:24
 
MyAvatars 0.2

Wow i get the easy math questions (3 + 4) :D
I’ve actually installed this to my site. I didn’t have any spam protection before but now i am testing this to see how well it works. I had like 62 pieces of spam in the last 24 hours so i hope this clears up my problem. Cheers Yaro and thanks for the link/plugin!

Lucas

Comment by Lucas @ 2006-11-04 08:41:53
 
MyAvatars 0.2

[…] Well it didn’t last long. You may remember at the end of October I switched to the math comment spam protection system. Unfortunately for the last two weeks I have been waking up to about 100 spam comments which must be smart enough to do basic math. […]

 
MyAvatars 0.2

It’s a great method of protection, i’ve seen it before but now i know where i can get it.. thanks alot

Comment by fora @ 2007-02-07 06:29:45
 
MyAvatars 0.2

poor idea for people who suck at math :) j/k but it’s a great plugin i know and talked to some people who use it aswel and they’r very happy about it

Comment by fora @ 2007-02-07 07:29:12
 
MyAvatars 0.2

For the moment it might work, but it by far more easier to crack then any captcha image.

Comment by gratis forum @ 2007-06-04 23:44:38
 
MyAvatars 0.2

I tried to make a comment on a site because which wanted me to find the sum of the root number etc. I could not figure it out an it was a genuine comment I wrote out and had questions and everything. Can the Spam filters figure this one out or is it manual spam that you were getting?

Comment by John @ 2007-06-05 15:26:12
 
MyAvatars 0.2

i’m using akismet …
but i still get more than 50 spam comments lik everyday …
damn them spammers …

Comment by subcorpus @ 2007-08-28 15:01:37
 
MyAvatars 0.2

I have not had that many over night in a long time and I’m beginning to think that Spam Karma may have deleted A LOT of my legitimate comments in the past.

Comment by News @ 2008-02-18 06:44:08
 
MyAvatars 0.2

I hope we don’t start seeing more and more sites with 2 different captcha / questions. I remember seeing at least one like that. I think that would be the simplest and most effective, but terribly annoying.

Comment by politics @ 2008-03-04 20:43:54
 

Leave a comment