3 ms·

They are proposing alternative methods that don't put the burden on the user in the form of explicit action. By using honeypot fields that would only be filled

They are proposing alternative methods that don't put the burden on the user in the form of explicit action. By using honeypot fields that would only be filled out by a robot, and timestamp analysis which effectively detects automatic form submission, they can weed out the bots without asking their users to do anything. What's so silly about that?

citricsquid 16y ago
Nothing, they're a good solution for this company. My point was the conclusions were based on this company, not everyone who suffers spam, the article has since been updated with: > For some reason this article has hit the front page of Hacker News and is getting quite a lot of traffic. I should mention that yes, I acknowledge CAPTCHAs are of course sometimes unavoidable. That doesn’t mean, however, that we should ever feel good about using them, nor should we fool ourselves that users don’t mind them. Which was my point. When spam is a serious issue then captchas are unavoidable 99% of the time.
- cj 16y ago
  If you're site is running on a popular forum software, robot-only inputs and timestamp analysis would eliminate most of your problems. Spammers are probably not targeting your website in particular, rather the software your forum is run on. If you add atypical anti-spam measures you'll separate yourself from others using the same platform, defeating the typical phpbb or vbulletin bot which probably accounts for most of your spam.
Ysx 16y ago
Honeypot fields and their ilk are easy to bypass with a focused attack. For smaller sites, that's fine - who's going to make the effort to target you? Keep out the opportunistic bots rattling your contact form, and life's good. For juicier targets, something more sophisticated is necessary. Captchas are one answer.
- darkmethod 16y ago
  Are there alternate yet equally as effective measures than what has been discussed? If so I'd like to hear more.
  - mkr-hn 16y ago
    Ant-spam services like Akismet.

citricsquid 16y ago

Nothing, they're a good solution for this company. My point was the conclusions were based on this company, not everyone who suffers spam, the article has since been updated with: > For some reason this article has hit the front page of Hacker News and is getting quite a lot of traffic. I should mention that yes, I acknowledge CAPTCHAs are of course sometimes unavoidable. That doesn’t mean, however, that we should ever feel good about using them, nor should we fool ourselves that users don’t mind them. Which was my point. When spam is a serious issue then captchas are unavoidable 99% of the time.

cj 16y ago
If you're site is running on a popular forum software, robot-only inputs and timestamp analysis would eliminate most of your problems. Spammers are probably not targeting your website in particular, rather the software your forum is run on. If you add atypical anti-spam measures you'll separate yourself from others using the same platform, defeating the typical phpbb or vbulletin bot which probably accounts for most of your spam.

Ysx 16y ago

Honeypot fields and their ilk are easy to bypass with a focused attack. For smaller sites, that's fine - who's going to make the effort to target you? Keep out the opportunistic bots rattling your contact form, and life's good. For juicier targets, something more sophisticated is necessary. Captchas are one answer.

darkmethod 16y ago
Are there alternate yet equally as effective measures than what has been discussed? If so I'd like to hear more.
- mkr-hn 16y ago
  Ant-spam services like Akismet.