<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:thr="http://purl.org/syndication/thread/1.0">
    <title>Comments for Comment Spamming</title>
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming" />
    <link rel="self" type="application/atom+xml" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming" />
    <id>tag:bradchoate.com,2007://4-</id>
    <updated>2007-01-02T19:51:29Z</updated>
    <subtitle>The man, the legend.</subtitle>
    <generator uri="http://www.sixapart.com/movabletype/">Movable Type -en-trunk--20070910</generator>
 

<entry>
    <id>tag:bradchoate.com,2002://4.1096-comment:387</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#c387" />
    <title>Comment from Mark on 2002-10-29</title>
    <author>
        <name>Mark</name>
        <uri>http://diveintomark.org/</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://diveintomark.org/">
        I want to set up a tarpit/honeypot, using some automated methods like this to spot spammers, then serve them up a fake comments form that doesn't actually post, combined with something like mod_bandwidth to dynamically throttle spamming IP addresses (rather than banning them).

<p>http://www.cohprog.com/v3/bandwidth/doc-en.html<br />
</p>]]>
    </content>
    <published>2002-10-30T05:21:06Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-comment:389</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#c389" />
    <title>Comment from Ali on 2002-10-30</title>
    <author>
        <name>Ali</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        Comment Spamming is major problem. Isn't there a mod avaiable which allows all comments to be validated before being posted on the site?]]>
    </content>
    <published>2002-10-30T23:44:39Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-comment:390</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#c390" />
    <title>Comment from paul on 2002-10-30</title>
    <author>
        <name>paul</name>
        <uri>http://www.paranoidfish.org/</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.paranoidfish.org/">
        Small problem - your suggested solution assumes that all real users traffic will consistently come from the same ip address throughout their visit.  

<p>This isn't true if their access is through multiple web proxies (eg AOL or my office, among others), so you risk loosing real comments along with the spam.</p>]]>
    </content>
    <published>2002-10-31T00:44:14Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-comment:391</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#c391" />
    <title>Comment from Brad Choate on 2002-10-30</title>
    <author>
        <name>Brad Choate</name>
        <uri>http://www.bradchoate.com/</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.bradchoate.com/">
        paul-- you're right.  Now that I think about it, there isn't any good reason to encode the user's IP like that.  I've revised my post to remove that element.  No need to unnecessarily exclude real visitors.]]>
    </content>
    <published>2002-10-31T04:03:22Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-comment:427</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#c427" />
    <title>Comment from tom on 2002-11-14</title>
    <author>
        <name>tom</name>
        <uri>http://www.quantumslip.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.quantumslip.com">
        Form fields can be accessed via DOM document.forms(x), based on their order in the HTML, so the spammer would not need to parse the HTML. However, a hidden field that was randomly placed with each page load would foil this approach. ]]>
    </content>
    <published>2002-11-14T10:27:01Z</published>
</entry>


<entry>
    <id>tag:bradchoate.com,2002://4.1096-ping:112</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#p112" />
    <title>Spam en los weblogs</title>
    <author>
        <name>kusor dhtml weblog</name>
        <uri>http://kusor.net/archivo-dhtml/000173.php</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://kusor.net/archivo-dhtml/000173.php">
        Estaba leyendo el weblog de Mark Pilgrim, concretamente el post relacionado con el spam en los comentarios de los weblogs
    </content>
    <published>2002-10-30T21:35:47Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-ping:134</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#p134" />
    <title>Comment and Trackback Spamming</title>
    <author>
        <name>Burningbird</name>
        <uri>http://weblog.burningbird.net/fires/000651.htm</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://weblog.burningbird.net/fires/000651.htm">
         The discussion continues on comment spamming and a couple of people have taken my initial quick fix and expanded on it nicely. Jennifer from Scripty Goddess has taken to solution into the MT tmpl files, adding the hidden field
    </content>
    <published>2002-11-05T08:17:24Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-ping:136</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#p136" />
    <title>&quot;No Comment&quot;</title>
    <author>
        <name>Joni Electric</name>
        <uri>http://www.jonielectric.com/archives/000512.html</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.jonielectric.com/archives/000512.html">
        I&apos;ve been following with interest the issue of comment spamming through MovableType (and presumably other content management systems that use
    </content>
    <published>2002-11-05T08:34:53Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-ping:759</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#p759" />
    <title>Spam Proof your Blog</title>
    <author>
        <name>Macrofun - DHTML / CFMX / FLASHMX</name>
        <uri>http://macrofun.pvpers.com/archives/000069.html</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://macrofun.pvpers.com/archives/000069.html">
        I was reading an article over at bradchoate.com (via moik78) on anti-Spamming &quot;howtos&quot; and while I agree with his hardcore &quot;that&apos;ll screw em&quot; approach, there is a very simple but effective alternative to stuff these bastards up (I agree, spammers...
    </content>
    <published>2003-05-02T15:38:20Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-ping:760</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#p760" />
    <title>Spam Proof your Blog</title>
    <author>
        <name>Macrofun - DHTML / CFMX / FLASHMX</name>
        <uri>http://macrofun.pvpers.com/archives/000069.html</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://macrofun.pvpers.com/archives/000069.html">
        I was reading an article over at bradchoate.com (via moik78) on anti-Spamming &quot;howtos&quot; and while I agree with his hardcore &quot;that&apos;ll screw em&quot; approach, there is a very simple but effective alternative to stuff these bastards up (I agree, spammers...
    </content>
    <published>2003-05-02T15:43:52Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-ping:761</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#p761" />
    <title>http://macrofun.pvpers.com</title>
    <author>
        <name></name>
        <uri>http://macrofun.pvpers.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://macrofun.pvpers.com">
        
    </content>
    <published>2003-05-02T15:44:52Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-ping:762</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#p762" />
    <title>http://macrofun.pvpers.com/mt-tb.cgi/9</title>
    <author>
        <name></name>
        <uri>http://macrofun.pvpers.com/mt-tb.cgi/9</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://macrofun.pvpers.com/mt-tb.cgi/9">
        
    </content>
    <published>2003-05-02T15:46:03Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-ping:997</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#p997" />
    <title>Blogspam</title>
    <author>
        <name>BLOG@STEFANGEENS.COM</name>
        <uri>http://www.stefangeens.com/000241.html</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.stefangeens.com/000241.html">
        ...And the innocent days of blogging are over. Over the past few months I&apos;ve deleted exactly two nutcase comments off my blog, both...
    </content>
    <published>2003-07-25T14:40:35Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-ping:1223</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#p1223" />
    <title>Spam in blogs, een nieuw probleem?</title>
    <author>
        <name>Punkey</name>
        <uri>http://www.punkey.com/archives/2003/10/006758.html</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.punkey.com/archives/2003/10/006758.html">
        Ik las onderweg al een pointer op mijn PDA-webloglezertje over een nieuw, snelgroeiend fenomeen: commentspam. Met name Movable Type-logs (wat wij dus ook hebben) schijnen hier veel last van te hebben. Een script zorgt voor 100en comments op je weblog...
    </content>
    <published>2003-10-14T22:02:33Z</published>
</entry>

<entry>
    <id>tag:bradchoate.com,2002://4.1096-ping:1304</id>
    <thr:in-reply-to ref="tag:bradchoate.com,2002://4.1096" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming"/>
 
    <link rel="alternate" type="text/html" href="http://bradchoate.com/weblog/2002/10/29/comment-spamming#p1304" />
    <title>Comment and Trackback Spamming</title>
    <author>
        <name>Burningbird</name>
        <uri>http://weblog.burningbird.net/fires/technology/comment_and_trackback_spamming.htm</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://weblog.burningbird.net/fires/technology/comment_and_trackback_spamming.htm">
         The discussion continues on comment spamming and a couple of people have taken my initial quick fix and expanded on it nicely. Jennifer from Scripty Goddess has taken to solution into the MT tmpl files, adding the hidden field to processing.tmpl. Brad...
    </content>
    <published>2003-11-24T18:23:20Z</published>
</entry>

</feed>