[IMC-Tech] Captcha implementation: which way to choose?

Ringo 2600denver at gmail.com
Thu Aug 12 17:52:55 PDT 2010


I'm not sure about these specific plugins, but I do remember looking
into akismet before and realizing that simply setting apache to not log
IPs (or scrub them) wasn't sufficient. IIRC Akismet and many other
systems get IPs through a PHP command which can't be fixed with a simple
change to the config file and/or have the form send things directly to
the anti-spam service.

Ringo

On 08/11/2010 10:30 AM, Ben Dean-kawamura wrote:
> Does "external service" refer to things like Akismet and Defensio.  For those,
> I've found that it's not a big deal to set the IP to 0.0.0.0 and send the
> message anyway.  At that point are there privacy concerns?  The post is about
> to be displayed to the world anyway, so I can't see any.
> 
> A separate issue is that many of those sites are require the user to sign up to
> their free, but proprietary service.
> 
> Ben
> 
> On 08/11/2010 06:33 AM, ekes wrote:
>> On 11/08/10 00:49, MJ Ray wrote:
>>> mike wrote:
>>>> I'm just now looking into Bayes filters and SpamAssassin rules as a
>>>> way to stop the spam based on content rather than captcha, although
>>>> both are probably a good idea.
>>
>>> Bayes and SA are anti-spam.
>>
>>> Psuedo-captchas are not.  They don't test spamminess at all and most
>>> of the common physical ability tests lock out disabled users.  Don't
>>> be conned into adding psuedo-captchas instead of anti-spam tools.
>>
>>> Hope that helps,
>>
>> Don't know about you but I've never managed to filter spam on a site
>> reliably with _only_ baysian stats (+ usual rules on so many external
>> links etc.) If not using an external service - which as Ringo points out
>> elsewhere isn't an option for Indymedia because it leaks information to
>> third party sites I've always required some additional captcha. How
>> inaccessible these captchas are depends... one of the present favourites
>> just includes a visibly hidden field you are told not to fill in - but
>> bots tend to anyway.
>>
>> Cheers,
> _______________________________________________
> imc-tech mailing list
> imc-tech at lists.indymedia.org
> http://lists.indymedia.org/mailman/listinfo/imc-tech
> _______________________________________________
> imc-tech mailing list
> imc-tech at lists.indymedia.org
> http://lists.indymedia.org/mailman/listinfo/imc-tech
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: OpenPGP digital signature
Url : http://lists.indymedia.org/pipermail/imc-tech/attachments/20100812/919326af/attachment.pgp 


More information about the imc-tech mailing list