The Artima Developer Community
Sponsored Link

Ruby Buzz Forum
Open Discussion: Fighting Spam in the New World

0 replies on 1 page.

Welcome Guest
  Sign In

Go back to the topic listing  Back to Topic List Click to reply to this topic  Reply to this Topic Click to search messages in this forum  Search Forum Click for a threaded view of the topic  Threaded View   
Previous Topic   Next Topic
Flat View: This topic has 0 replies on 1 page
Jeremy Voorhis

Posts: 212
Nickname: jvoorhis
Registered: Oct, 2005

Jeremy Voorhis is a Rubyist in northeast Ohio.
Open Discussion: Fighting Spam in the New World Posted: Jun 9, 2006 5:53 PM
Reply to this message Reply

This post originated from an RSS feed registered with Ruby Buzz by Jeremy Voorhis.
Original Post: Open Discussion: Fighting Spam in the New World
Feed Title: JVoorhis
Feed URL: http://feeds.feedburner.com/jvoorhis
Feed Description: JVoorhis is a Rubyist in northeast Ohio. He rambles about Ruby on Rails, development practices, other frameworks such as Django, and on other days he is just full of snark.
Latest Ruby Buzz Posts
Latest Ruby Buzz Posts by Jeremy Voorhis
Latest Posts From JVoorhis

Advertisement

Today, Joshua Harvey and I removed the Globalize project’s Trac. Why? Because we had no filtering mechanism in place, and human intervention is damn near worthless in the fight against spam.

Even before it became a problem for us, I had marveled at the low rate of spam the official Ruby on Rails trac had received, considering it is a public forum that requires no identification to post. I had the chance to chat up Dan Peterson, the Ruby on Rails systems administrator, and he disclosed that he uses mod_security to do filter the bulk of the illicit links. Kudos, Dan!

I am enumerating over the current technology for providing good spam filtering. Recently, Rick Olson has posted about his experiences with Akismet which sounds very promising. The interesting part of the post is the comments – shortly after announcing his integration of Mephisto – his attractive and streamlined bloggish CMS, or CMS-ish blog application – Akismet went kaput. Anecdotal evidence aside, let’s suppose Akismet is really great. Akismet requires you pay a licensing fee for commercial use, and building my application to depend on a third-party service just for comment filtering goes against my sense of aesthetics – any kind of application with a public form could use spam filtering, and it would make sense to make this a service which can be maintained system-wide, like a firewall.

Let’s open a discussion about what can be done to improve the situation at large. Feel free to share any links or advice about spam-fighting techniques in the comments. I have included some of mine below.

Links

Techniques

Web server

Of course, these techniques could all be implemented at the application level if you really wanted to.

  • filtering contents of POST requests with mod_security
  • throttling post requests from a particular IP
  • Deny POST requests from IPs identified on dsbl.org

Application-level

  • Integration with Akismet/other commenting services
  • Requiring comments be previewed
  • Captchas
  • Authentication required (no public comments)
    • could be less heavy-handed with OpenID, but that hasn’t been widely adopted yet

Read: Open Discussion: Fighting Spam in the New World

Topic: Trawling for Requirements Previous Topic   Next Topic Topic: 0.4.5 will have to wait until tomorrow

Sponsored Links



Google
  Web Artima.com   

Copyright © 1996-2019 Artima, Inc. All Rights Reserved. - Privacy Policy - Terms of Use