<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	>
<channel>
	<title>Comments on: Bizarre spam</title>
	<atom:link href="http://blog.amber.org/2005/04/21/bizarre-spam/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.amber.org/2005/04/21/bizarre-spam/</link>
	<description>Thoughts of a minor lunatic</description>
	<pubDate>Wed, 07 Jan 2009 14:15:25 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.7</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: james</title>
		<link>http://blog.amber.org/2005/04/21/bizarre-spam/comment-page-1/#comment-1626</link>
		<dc:creator>james</dc:creator>
		<pubDate>Fri, 22 Apr 2005 18:47:28 +0000</pubDate>
		<guid isPermaLink="false">http://blog.amber.org/2005/04/21/bizarre-spam/#comment-1626</guid>
		<description>The problem with that is, all I have to do is manually enter a comment once, and then I can have my script spam you senseless after that, since it won't have to deal with the CAPTCHA.

Not the most efficient way to spam, but certainly the most likely outcome.

PS: You should make a note that the CAPTCHA is case-sensitive.</description>
		<content:encoded><![CDATA[<p>The problem with that is, all I have to do is manually enter a comment once, and then I can have my script spam you senseless after that, since it won&#8217;t have to deal with the CAPTCHA.</p>
<p>Not the most efficient way to spam, but certainly the most likely outcome.</p>
<p>PS: You should make a note that the CAPTCHA is case-sensitive.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: petrilli</title>
		<link>http://blog.amber.org/2005/04/21/bizarre-spam/comment-page-1/#comment-1624</link>
		<dc:creator>petrilli</dc:creator>
		<pubDate>Fri, 22 Apr 2005 14:20:40 +0000</pubDate>
		<guid isPermaLink="false">http://blog.amber.org/2005/04/21/bizarre-spam/#comment-1624</guid>
		<description>I have considered this as well. The problem comes from people who might come from multiple IPs. Do you trust them? I think the best idea is to find tuples of people (name, mail, IP) who have passed the CAPTCHA once, and then not present it to them again. Unfortunately, that'll require writing PHP code, which I hate, but more importantly, don't have time for right now.</description>
		<content:encoded><![CDATA[<p>I have considered this as well. The problem comes from people who might come from multiple IPs. Do you trust them? I think the best idea is to find tuples of people (name, mail, IP) who have passed the CAPTCHA once, and then not present it to them again. Unfortunately, that&#8217;ll require writing PHP code, which I hate, but more importantly, don&#8217;t have time for right now.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andre</title>
		<link>http://blog.amber.org/2005/04/21/bizarre-spam/comment-page-1/#comment-1623</link>
		<dc:creator>Andre</dc:creator>
		<pubDate>Fri, 22 Apr 2005 07:40:04 +0000</pubDate>
		<guid isPermaLink="false">http://blog.amber.org/2005/04/21/bizarre-spam/#comment-1623</guid>
		<description>A whitelist of known folks (with name, mail and probably IP) could be used to show the CAPTCHA only to unknowns, be they newbies or spammers.

Also there are some tricks you can play with your templates to turn spammers away - HTML has more than one way of showing the exact same form, even more using CSS. Make it a little less deterministic and they will leave your blog alone, hopefully.</description>
		<content:encoded><![CDATA[<p>A whitelist of known folks (with name, mail and probably IP) could be used to show the CAPTCHA only to unknowns, be they newbies or spammers.</p>
<p>Also there are some tricks you can play with your templates to turn spammers away &#8211; HTML has more than one way of showing the exact same form, even more using CSS. Make it a little less deterministic and they will leave your blog alone, hopefully.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
