Comments on: is_human() now being used to combat spam

By: Dave M

Dave M — Wed, 18 Jun 2008 11:56:36 +0000

Well the goal isn’t for the spam bot to “load” the questions… The goal would be to “scrape” whatever the challenge question is, and present that to a user on another site.

And I imagine that there are more users available to answer simple questions on Porn and Warez sites than most blogs… So it’s there.

The idea I talk about was presented on one of Google’s tech presentations… It’s the future of spamming… however, the is_Human() is a great solution, I was only pointing out that, if you build it, they will spam it.

By: Steve Belt

Steve Belt — Mon, 16 Jun 2008 02:10:54 +0000

Dave, the problem you describe is why I like is_human(). Other blogs use one simple anti-spam question, and I’m sure the spammers are able to program the answer to that question into their system. With the randomness of is_human() and the huge number of possible questions, this has the potential of foiling any automated system.

I’m still getting some spam, but primarily it’s trackbacks, which don’t have a spam filter, but are always caught by Akismet. The few non-trackbacks are either from a really, really good system (which I doubt) or were actually hand entered. Regardless, they are still getting caught by Akismet, so these spammers are wasting their time.

Thanks again, Nick! Love the plug-in.

By: Nick Berlette

Nick Berlette — Sun, 15 Jun 2008 20:37:20 +0000

Dave, I don’t believe that many spammers would go to lengths like that to spam a blog. They would have to essentially have one human per spam post, which would take a very long time. And if any spam comments do get past is_human(), there’s always the Mark as Spam button and Akismet

By: Dave M

Dave M — Mon, 09 Jun 2008 16:04:06 +0000

Steve, imagine this for a second though… and you will realize that if they want too… they can spam you…

A Spam bot comes to your page to spam your blog, it sees a capthca image, or something like a question… instead of trying to figure it out, it simply scrapes what is there, and waits for someone to visit one of their “porn” or questionable sites, and in order for that person to get access to that site, they must answer what that image/question is asking them…

The program then submits that as the response, and boom, you are spammed… it is a great design that uses humans, unknowingly to get around filters designed to stop automated programs…

Now think about this, computers, using humans, to act like humans in order to gain access to systems… Red pill or blue pill anyone?

By: Steve Belt

Steve Belt — Sun, 08 Jun 2008 16:11:45 +0000

Nick, wow, what great support. Thanks for the heads-up!

By: Nick Berlette

Nick Berlette — Sun, 08 Jun 2008 06:50:43 +0000

Hey Steve! Thanks for taking the time to add my plugin to your site . I appreciate this review and the incoming visits I’m receiving from it, and I’m glad that I could help out with your spam problems.

I actually just released a new version with some features that might interest you. Check it out over here.

Thanks again!

By: Steve Belt

Steve Belt — Fri, 06 Jun 2008 06:15:24 +0000

I was hoping to wander over to your place and lift a comment policy, but then I saw you also hadn’t done it. Let’s both get this done before I post Sunday’s stats.

By: Dru Bloomfield

Dru Bloomfield — Fri, 06 Jun 2008 06:13:34 +0000

Well, Steve, thanks for citing me as the source of the suggestion, and for reminding me that I still haven’t put a comment policy in place myself, which I really need to do! Guess it’s time to wander over to Jay’s place and see what he’s put together…..