[thelist] tracking spammers
Renoir Boulanger
renoirb at gmail.com
Fri Jul 8 07:54:23 CDT 2011
I dont know why, this did not get through. Here it is again
Tracking spammers
Here is my take on what I would start searching from.
== My opinion ==
I tend to say that using the password as an element to detect a registrant as a spammer is unreliable.
First, ethical issue, then, we, tech savy people, teach [non tech savy] friends and family to have better passwords.
I don't know where your research went so far but here is some places I might look onto:
== Patterns ==
- run a dictionary check on username it doesnt happen often, when user has right to decide username, to pick something non human
- Keep track of IP and check if IP did not try already some time ago
- Use MX check on user email domain provider then try to send email to it and require user email confirmation from a generated URL (obvious but good filter I think)
- Use Facebook connect. If there is a session opened and the username doesnt fit at all with user. Remove validity points
== Open source utilities ==
- SpamAssassin
They provide a suite of testing tools and scoring system. I think you could be able to use the engine as a filter and pass your registration fields through it like we do with mail servers there is lots of documentation.
== Webservices ==
- Get API access to Relay Black Lists they could give some hint on spammer networks. Do not use as hard evidence because it's SMTP IP addresses and not actual users
- Try to see what WordPress has done with their Akismet, they provide professionnal API and they work well on comments on blogs
- ReCaptcha is a captcha provider. Could be useful. Why re-creating captcha system.
Others to check out
- BlogSpam.net and Mollum -- Guys at empire avenue came in Montreal at ConFoo/PHPQuebec meetup and mentioned this service. I heard about them yesterday. Cannot talk about it.
Off topic for a second:
== ConFoo ==
A web techno conference from the PHP, ruby, java, Javascript usergroup communities Happening in montreal in Feb-March 2012.
We are about to open call for speakers if you are interrested, send a mail to board at confoo.ca
Cheers Guys
RENOIR BOULANGER //
devLABmtl.org/
ConFoo.ca/
evocatio.com/
(envoyé de mon téléphone)
~
More information about the thelist
mailing list