<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Guilty Until Proven Innocent</title>
	<atom:link href="http://james.padolsey.com/general/guilty-until-proven-innocent/feed/" rel="self" type="application/rss+xml" />
	<link>http://james.padolsey.com/general/guilty-until-proven-innocent/</link>
	<description>Just another WordPress weblog</description>
	<lastBuildDate>Thu, 02 Feb 2012 18:03:26 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2</generator>
	<item>
		<title>By: Usman Bashir</title>
		<link>http://james.padolsey.com/general/guilty-until-proven-innocent/comment-page-1/#comment-2868</link>
		<dc:creator>Usman Bashir</dc:creator>
		<pubDate>Mon, 12 Jan 2009 12:53:27 +0000</pubDate>
		<guid isPermaLink="false">http://james.padolsey.com/?p=393#comment-2868</guid>
		<description>Instead of hiding the fields using css we can use JavaScript that way it will at least buy us some time to find some new solutions to it.</description>
		<content:encoded><![CDATA[<p>Instead of hiding the fields using css we can use JavaScript that way it will at least buy us some time to find some new solutions to it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: James</title>
		<link>http://james.padolsey.com/general/guilty-until-proven-innocent/comment-page-1/#comment-2814</link>
		<dc:creator>James</dc:creator>
		<pubDate>Sun, 11 Jan 2009 11:35:56 +0000</pubDate>
		<guid isPermaLink="false">http://james.padolsey.com/?p=393#comment-2814</guid>
		<description>@Alex, I can see the logic in what you&#039;re saying but spammers and criminals are getting wiser and will soon exploit your logic.

@Shane, you&#039;re right, it&#039;s just annoying because in the end we&#039;re all quite powerless to do anything. Google Mail is awesome at blocking spam so email spam isn&#039;t much of a problem for me but my dad receives upwards of 1000 spam messages in just one day. I&#039;ve told him to start using a different email address but he says the hassle involved in changing it doesn&#039;t outweigh the benefit... It&#039;ll only get worse for him.

@Daniel, I think comment spam only becomes a real problem with really big sites - moderators don&#039;t have time to review every comment in detail so many of the spam comments (like the seemingly innocent one in the example) end up getting through. LOL @ me being a robot! :D

@Corey, I&#039;ve heard of that method before and I&#039;m sure it works really well but eventually (like all other methods) the spammers are going to be able to detect those fields which are hidden.</description>
		<content:encoded><![CDATA[<p>@Alex, I can see the logic in what you&#8217;re saying but spammers and criminals are getting wiser and will soon exploit your logic.</p>
<p>@Shane, you&#8217;re right, it&#8217;s just annoying because in the end we&#8217;re all quite powerless to do anything. Google Mail is awesome at blocking spam so email spam isn&#8217;t much of a problem for me but my dad receives upwards of 1000 spam messages in just one day. I&#8217;ve told him to start using a different email address but he says the hassle involved in changing it doesn&#8217;t outweigh the benefit&#8230; It&#8217;ll only get worse for him.</p>
<p>@Daniel, I think comment spam only becomes a real problem with really big sites &#8211; moderators don&#8217;t have time to review every comment in detail so many of the spam comments (like the seemingly innocent one in the example) end up getting through. LOL @ me being a robot! <img src='http://james.padolsey.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> </p>
<p>@Corey, I&#8217;ve heard of that method before and I&#8217;m sure it works really well but eventually (like all other methods) the spammers are going to be able to detect those fields which are hidden.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Corey</title>
		<link>http://james.padolsey.com/general/guilty-until-proven-innocent/comment-page-1/#comment-2783</link>
		<dc:creator>Corey</dc:creator>
		<pubDate>Sat, 10 Jan 2009 23:43:37 +0000</pubDate>
		<guid isPermaLink="false">http://james.padolsey.com/?p=393#comment-2783</guid>
		<description>I&#039;ve found that sticking a hidden field with a blank value in the form stops pretty much all spam in comment and contact forms, or any form actually.

by hidden though, i mean &quot;display:none&quot;, not an &quot;.
for example:

&lt;pre lang=&quot;html4strict&quot;&gt;
&lt;input type=&quot;text&quot; name=&quot;check&quot; value=&quot;&quot; style=&quot;display:none&quot; /&gt;
&lt;/pre&gt;

Bots usually fill in all fields of a form with fake values. If someone submits a comment and the &quot;check&quot; field has a value, then you know it was a bot. If your worried about users w/out css enabled, then just place something before it saying &quot;don&#039;t enter anything&quot;.</description>
		<content:encoded><![CDATA[<p>I&#8217;ve found that sticking a hidden field with a blank value in the form stops pretty much all spam in comment and contact forms, or any form actually.</p>
<p>by hidden though, i mean &#8220;display:none&#8221;, not an &#8220;.<br />
for example:</p>

<div class="wp_syntax"><div class="code"><pre class="html4strict" style="font-family:monospace;"><span class="sc2">&lt;<span class="kw2">input</span> <span class="kw3">type</span><span class="sy0">=</span><span class="st0">&quot;text&quot;</span> <span class="kw3">name</span><span class="sy0">=</span><span class="st0">&quot;check&quot;</span> <span class="kw3">value</span><span class="sy0">=</span><span class="st0">&quot;&quot;</span> <span class="kw3">style</span><span class="sy0">=</span><span class="st0">&quot;display:none&quot;</span> <span class="sy0">/</span>&gt;</span></pre></div></div>

<p>Bots usually fill in all fields of a form with fake values. If someone submits a comment and the &#8220;check&#8221; field has a value, then you know it was a bot. If your worried about users w/out css enabled, then just place something before it saying &#8220;don&#8217;t enter anything&#8221;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Daniel</title>
		<link>http://james.padolsey.com/general/guilty-until-proven-innocent/comment-page-1/#comment-2782</link>
		<dc:creator>Daniel</dc:creator>
		<pubDate>Sat, 10 Jan 2009 23:20:25 +0000</pubDate>
		<guid isPermaLink="false">http://james.padolsey.com/?p=393#comment-2782</guid>
		<description>I had bot that visited my site a couple of times and re-posted all the all existing comments of a post.. but it shuffled all the words first, and then sneaked in some sneaky urls (: twas a laugh none the less. 

I always review my comments before publishing, so a part from spam, nothing offensive get&#039;s published. 

Ps. Judging from your level of productivity James, I&#039;m starting to think that you are some kind of robot too ;)</description>
		<content:encoded><![CDATA[<p>I had bot that visited my site a couple of times and re-posted all the all existing comments of a post.. but it shuffled all the words first, and then sneaked in some sneaky urls (: twas a laugh none the less. </p>
<p>I always review my comments before publishing, so a part from spam, nothing offensive get&#8217;s published. </p>
<p>Ps. Judging from your level of productivity James, I&#8217;m starting to think that you are some kind of robot too <img src='http://james.padolsey.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Shane</title>
		<link>http://james.padolsey.com/general/guilty-until-proven-innocent/comment-page-1/#comment-2778</link>
		<dc:creator>Shane</dc:creator>
		<pubDate>Sat, 10 Jan 2009 22:08:35 +0000</pubDate>
		<guid isPermaLink="false">http://james.padolsey.com/?p=393#comment-2778</guid>
		<description>I always check the URLs that are left; I wouldn&#039;t want my site linking to anything illegal or pornographic.

There are some spam e-mails that are more difficult to recognise than your typical &#039;go larger&#039;, particularly for users not familiar with phishing and so on.

You&#039;re absolutely right that education is the key - but it&#039;s an ongoing concern.  Spammers are always developing new methods to trick the unsuspecting.</description>
		<content:encoded><![CDATA[<p>I always check the URLs that are left; I wouldn&#8217;t want my site linking to anything illegal or pornographic.</p>
<p>There are some spam e-mails that are more difficult to recognise than your typical &#8216;go larger&#8217;, particularly for users not familiar with phishing and so on.</p>
<p>You&#8217;re absolutely right that education is the key &#8211; but it&#8217;s an ongoing concern.  Spammers are always developing new methods to trick the unsuspecting.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ibrahim</title>
		<link>http://james.padolsey.com/general/guilty-until-proven-innocent/comment-page-1/#comment-2776</link>
		<dc:creator>Ibrahim</dc:creator>
		<pubDate>Sat, 10 Jan 2009 22:02:46 +0000</pubDate>
		<guid isPermaLink="false">http://james.padolsey.com/?p=393#comment-2776</guid>
		<description>Thanks James :)</description>
		<content:encoded><![CDATA[<p>Thanks James <img src='http://james.padolsey.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Alex Denning</title>
		<link>http://james.padolsey.com/general/guilty-until-proven-innocent/comment-page-1/#comment-2775</link>
		<dc:creator>Alex Denning</dc:creator>
		<pubDate>Sat, 10 Jan 2009 21:50:35 +0000</pubDate>
		<guid isPermaLink="false">http://james.padolsey.com/?p=393#comment-2775</guid>
		<description>I take the opposite view - if its not malicious, then publish it, otherwise let Akismet deal with it. I don&#039;t have the website field on my site, so its a big give away when comments have urls on them!</description>
		<content:encoded><![CDATA[<p>I take the opposite view &#8211; if its not malicious, then publish it, otherwise let Akismet deal with it. I don&#8217;t have the website field on my site, so its a big give away when comments have urls on them!</p>
]]></content:encoded>
	</item>
</channel>
</rss>

