Five minutes after I placed my new django-based website online, I got my first spam. Yesterday, I got as many comments (all spam) as I used to get in a month when this website was based on ExpressionEngine!
Of course EE’s captcha was enabled, so it helped, but spam still got through – a few every other day.
So, what can I do about it?
- Conventional captchas are not so efficient (cracked, cheap human labor, …), and they are often as tough on humans as they are on scripts;
- Akismet: I don’t want to depend on external entities unless I have exhausted all other possibilities;
- The popular reCAPTCHA – apparently often cracked, and doesn’t fit my external policy;
- “Are you human” thingies, like simple mathematical formulas – I strongly believe “1+4” to be easily parsable and calculable by any script, and I find most other solution I found too annoying to implement and/or use (like “drag the pencil image to some box on the right”).
So what about bogofilter?