in wp there's a great antispam:
http://www.hybrid6.com/webgeek/plugins/wp-spamfree
http://www.hashcash.org/
lots of people hate captcha and it does really annoying.
this method combine js and cookies that no spambot can use.
maybe can be ported to mybb?
with that, we dont need captcha to block 100% spambot with zero false positive.
and it's absolutely transparent to real browser
MyBB already uses Askimet, which to my knowledge does a good job.
cmiiw.
with akismet, each spam post gets into the database. then, it's sent to akismet to check if it's spam or not.
if you hit by spambot a lot, it will causing very high usage of cpu/ram and very busy mysql server.
you might even get suspended by your host for that.
with this method, the spam never even gets to the database.
never need to be checked at all.
zero overhead on the server.
akismet still can be usefull for manual human posted spam.
so,
i still suggest this kind of method to protect not only forum message,
but ALL forms (registration, login, post, search, etc...)
That's all fine and good, but MyBB hasn't experienced any problems with bots yet ( to my knowledge ) so human spam protection is all we really need right now. It's much more suitable as a plugin.
which antispam can claim this?
- 100% spambot blocked. nothing more. nothing less.
- 0 false positive
- 0 false negative
- nothing to configure
- nothing to moderate
- completely transparent to real human with real browser
- zero server overhead
- can protects ALL forms: registration, login, search, etc...
only this method can.
(2009-05-14, 02:36 AM)Scoutie44 Wrote: [ -> ]... but MyBB hasn't experienced any problems with bots yet ( to my knowledge ) ...
correct. but i really do not want to wait for that to happen.
(2009-05-14, 02:43 AM)dennyhalim Wrote: [ -> ]- completely transparent to real human with real browser
I've just been reading up on this, and it's certainly an interesting idea - for a blog. I have Askimet on my blog and every forum I've setup, and it's never failed me once.
I haven't seen a demo of this, or really seen it in action, but what if I disable javascript on my browser (which I frequently do)? It's poo'd...
(2009-05-14, 09:41 AM)Tomm M Wrote: [ -> ]I've just been reading up on this, and it's certainly an interesting idea - for a blog. I have Askimet on my blog and every forum I've setup, and it's never failed me once.
I haven't seen a demo of this, or really seen it in action, but what if I disable javascript on my browser (which I frequently do)? It's poo'd...
it'll tell you:
you need to enable js & cookie to be able to post comment/messages/login/etc...etc...
something like that...
but again...
see your stats. i bet less than 5% disable js or cookies.
on my web, it's less than 1%.
only geek want to disable js/cookies. most usual user dont even know anything about js/cookies.
and if your user know how to disable js/cookies, it's certainly easy for them to enable it.
for me... it's worth it.
(also... nowadays, which website you can login without js/cookies?)
btw. you can see it on my wpmu blog
http://gobloglah.com
which already experiences multiple up and down hits by spambot very badly.
akismet did do a lot blocking spam at that time.
but i end up with huge cpu/ram usage and suspended by my hosting multiple times.
not to count the time i have to moderate few hundreds spam filtered by akismet. everyday.
(2009-05-14, 09:50 AM)dennyhalim Wrote: [ -> ]see your stats. i bet less than 5% disable js or cookies.
on my web, it's less than 1%.
only geek want to disable js/cookies. most usual user dont even know anything about js/cookies.
and if your user know how to disable js/cookies, it's certainly easy for them to enable it.
Actually, my stats say 9% don't have cookies, and 11% don't have JS.
Your perception of "only geeks" who disable javascript is wrong. Blind/hard of sight users will not be able to use the website. In some businesses, they disable javascript for security reasons (most use IE6 too). People who use keyboard accessibility keys will not be able to use the website. Same goes for those people who use assistive technology.
If I were to use this software on some of the things I've worked on in the past, I probably would have wiped out 75% of the user audience.
(2009-05-14, 09:50 AM)dennyhalim Wrote: [ -> ]it'll tell you:
you need to enable js & cookie to be able to post comment/messages/login/etc...etc...
something like that...
Wrong. MyBB works just fine without javascript. You just don't get all the fancy effects