Thursday, September 8 2005

comment spam

Comments are off for the day, because I don’t feel like changing things around again to block the one zombie-master who has figured out how to add comments to my blog entries. It’s only about ten a day, he doesn’t actually get anything out of it (my comment pages aren’t indexed in search engines), and the originating IP addresses are blackholed the moment his script posts one of them, but their existence offends me.

I have some code lying around that will defeat his current method (harvest URL from search engines, post comment from an address that’s never surfed my site before, then get the page and see if his comment was added), but I don’t feel like tinkering with Movable Type right now. When I do, it will scramble all comments less than one minute old, preventing the verification pass.

Zombies are pretty stupid, though, so I don’t expect it to stop them from trying. You’d think he’d eventually give up when it became obvious that his spam doesn’t work here, but apparently zombie masters are pretty stupid, too.

Update: I still don’t feel like hacking on the server, so I’m reopening comments on specific entries. The spammers mostly pick on well-indexed, well-referenced blogs, so the new stuff should be pretty safe.