Re:Reducing website spam
by RyanMcGreal on Thursday December 01, 2011 @12:11PM
(#3300430)
I managed to completely eliminate bot spam on a fairly popular site I administer through a combination of a honeypot form field and a simple human-testing question. This worked flawlessly for years, but a recent problem is spam accounts that appear to be filled in by actual humans rather than bots.
[ Parent
| on HN ]
We just don't like doing that no matter how simple it is. A lot of our users are from all over the world (probably 50% from non English speaking countries) and it really makes it a lot harder for them to signup. Also anything that acts as a barrier no matter how weak WILL lose customers and signups!
So use math, the universal language. I had a site request that I try to stop spam on a evaluation/registration page. I added a randomized single-digit addition problem to the form and the spam ceased. A single input field where the answer is always 0 to 18 was all it took.
Or course, if someone took the time to target this specific site, that would be easily thwarted.
It still puzzles me just how this custom-made form got infiltrated by spam to begin with. Do people go around picking such forms and submitting form-specific bot-code code to some vast pool sold to bot operators? Or are bots far more intelligent than I give them credit for?