Comments on: Spam Karma 2.0 Feature Requests http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/ Chemically-enhanced neural rewiring, on a semi-regular basis... Mon, 01 Dec 2008 21:59:52 +0000 http://wordpress.org/?v=2.5.1 By: Chris http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-21484 Chris Sat, 30 Nov 2002 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-21484 I’m sending a directed donation - please do your best to add a feature to deliver a small, strategically placed electric shock to the spammer when you trap their messages for me. I understand there will probably be a few false-positives, which I can live with. And, if you could include a SK plugin hook for hacking the severity of the shock (add a disclaimer if you need to), I would gladly send ANOTHER $15 for that. Excellent work! Chris I’m sending a directed donation - please do your best to add a feature to deliver a small, strategically placed electric shock to the spammer when you trap their messages for me. I understand there will probably be a few false-positives, which I can live with. And, if you could include a SK plugin hook for hacking the severity of the shock (add a disclaimer if you need to), I would gladly send ANOTHER $15 for that.

Excellent work!

Chris

]]> By: Matt http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-9297 Matt Thu, 30 Nov 2006 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-9297 Thanks for your work on this, Dave. Spam Karma rules. I know that you've stopped development for now, but I'll add this feature request for "posterity": I would love to have an option that puts trackbacks from my own site in the moderation queue. Right now, every time I include a link to one of my own posts, it shows up as a trackback; that's not a huge problem, but since I edit my posts often, I waste a lot of time going back and re-deleting those trackbacks after I'm done. That would just be gravy on what is the plugin to end all plugins (and all spam). Thanks for your work on this, Dave. Spam Karma rules.

I know that you’ve stopped development for now, but I’ll add this feature request for “posterity”:

I would love to have an option that puts trackbacks from my own site in the moderation queue.

Right now, every time I include a link to one of my own posts, it shows up as a trackback; that’s not a huge problem, but since I edit my posts often, I waste a lot of time going back and re-deleting those trackbacks after I’m done.

That would just be gravy on what is the plugin to end all plugins (and all spam).

]]> By: Robert http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-9039 Robert Thu, 30 Nov 2006 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-9039 First of all, thanks for this powerful plugin :) And now, for the feature request: I suffer flood attacks, instead of spam attacks. Spam Karma does not protect a particular, mostly forgotten, easily floodable feature of most sites: the "request new password" page. My site has been used by a malicious user to flood the mails of my commenters by targeting an script that request hundreds of new passwords for them, flooding my registered visitors' mailboxes... yes, bad thing... The "SnowBall effect" could be adapted to protect those requests, and other similar unprotected areas, as the registering form. First of all, thanks for this powerful plugin :)
And now, for the feature request:

I suffer flood attacks, instead of spam attacks. Spam Karma does not protect a particular, mostly forgotten, easily floodable feature of most sites: the “request new password” page.

My site has been used by a malicious user to flood the mails of my commenters by targeting an script that request hundreds of new passwords for them, flooding my registered visitors’ mailboxes… yes, bad thing…

The “SnowBall effect” could be adapted to protect those requests, and other similar unprotected areas, as the registering form.

]]> By: Craig http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-8581 Craig Thu, 30 Nov 2006 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-8581 Apparently I have been added to this spam list, i get told this when i try and post on niteowls website, hat is going on some one please help, I know for a fact I have never spammed in my life. Apparently I have been added to this spam list, i get told this when i try and post on niteowls website, hat is going on some one please help, I know for a fact I have never spammed in my life.

]]> By: Matthew Seddon http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-8567 Matthew Seddon Thu, 30 Nov 2000 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-8567 How about an option to publish your own blacklist? That would make sharing the list a tad easier. You would be able to share with multiple wp installs by using your local blacklist url. Also have the ability to add multiple source blacklists, so you can use the central blacklist db, as well as a couple belonging to your friends. How about an option to publish your own blacklist? That would make sharing the list a tad easier. You would be able to share with multiple wp installs by using your local blacklist url. Also have the ability to add multiple source blacklists, so you can use the central blacklist db, as well as a couple belonging to your friends.

]]> By: Darrin Thompson http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-7917 Darrin Thompson Tue, 30 Nov 2010 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-7917 Have an option to use <a href="http://www.captchaservice.org/" rel="nofollow">http://www.captchaservice.org/</a> when gd won't work. Have an option to use http://www.captchaservice.org/ when gd won’t work.

]]> By: Anthony Yager http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-7603 Anthony Yager Thu, 30 Nov 2000 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-7603 First I love your plugin. One suggestion to allow people to tailor their installation without too much coding work would be to allow users to change the weightings for failing various tests. So for example next to 'Penalize HTML entities' you could have a box to change the default of 1 and next to 'Take in account moderation criteria set on the Discussion page ' a box to change the default of 3 This would allow users to tailor their specific installation and help keep 'em guessing because the rules are more variable. This makes spam karma more difficult to work around. First I love your plugin. One suggestion to allow people to tailor their installation without too much coding work would be to allow users to change the weightings for failing various tests. So for example next to
‘Penalize HTML entities’ you could have a box to change the default of 1
and next to
‘Take in account moderation criteria set on the Discussion page ‘ a box to change the default of 3
This would allow users to tailor their specific installation and help keep ‘em guessing because the rules are more variable. This makes spam karma more difficult to work around.

]]> By: Barry Stellrecht http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-7596 Barry Stellrecht Sun, 30 Nov 2008 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-7596 My website uses 5 WP "blogs" and three of them allow comments, and Spam-Karma is installed on them all. I'm quite happy to have a non-prefixed table, so the blacklisting goes across my sites, and the updates don't need to be duplicated either. The only possible concern with multiple sites sharing the database is if there is some sort of race condition where two of them are modifying the table at the same time. (And I've not seen any sign of problems yet) Overall, GREAT job--you're solving my comment spam problems. (If only referrer spam could go away too...oh well, I'm just resigned to not getting useful data from my logs there anymore....it never was really useful, just fun) My website uses 5 WP “blogs” and three of them allow comments, and Spam-Karma is installed on them all. I’m quite happy to have a non-prefixed table, so the blacklisting goes across my sites, and the updates don’t need to be duplicated either. The only possible concern with multiple sites sharing the database is if there is some sort of race condition where two of them are modifying the table at the same time. (And I’ve not seen any sign of problems yet)

Overall, GREAT job–you’re solving my comment spam problems. (If only referrer spam could go away too…oh well, I’m just resigned to not getting useful data from my logs there anymore….it never was really useful, just fun)

]]> By: weefselkweekje http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-7310 weefselkweekje Thu, 30 Nov 2006 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-7310 Although SK catches 100% of the spam posted to my websites, there seems to be one form of protection that could make it even better. Hash Cash (already available as a WP plugin). How about adding this type of protection to SK, although it might need to be disabled by default as it won't allow users with javascipt turned off to post... Keep up the good work! Although SK catches 100% of the spam posted to my websites, there seems to be one form of protection that could make it even better. Hash Cash (already available as a WP plugin). How about adding this type of protection to SK, although it might need to be disabled by default as it won’t allow users with javascipt turned off to post…

Keep up the good work!

]]> By: mostly cajun http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-6406 mostly cajun Wed, 30 Nov 2011 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-6406 Installed SK a couple of days ago. It stopped comment spam DEAD! One of my buddies tried different hits to see how bad his post had to be and finally got to a CAPTCHA block. I am very happy with SK! BUT ( you knew this was coming ) today I'm being attacked for the first time with trackback spam. I do hope your new SK will have a bit heftier weapons against this aggravation. Thanks for the work! Installed SK a couple of days ago. It stopped comment spam DEAD! One of my buddies tried different hits to see how bad his post had to be and finally got to a CAPTCHA block. I am very happy with SK!

BUT ( you knew this was coming ) today I’m being attacked for the first time with trackback spam. I do hope your new SK will have a bit heftier weapons against this aggravation.

Thanks for the work!

]]> By: Dr Dave's Blog » Sick of this Crap http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-3652 Dr Dave's Blog » Sick of this Crap Thu, 30 Nov 2006 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-3652 y better than most, but probably won’t last). I know very exactly what is needed and what could be done to bring it back up to a satisfying level of [...] y better than most, but probably won’t last). I know very exactly what is needed and what could be done to bring it back up to a satisfying level of [...]

]]> By: himself http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-2810 himself Sun, 30 Nov 2003 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-2810 Spammers like to use poor splelling and extended ascii characters. Perhaps rules such that - unless 90% of the words in comments are other than dictionary words it will be considered spam (captcha test) - extended ascii = spam (captcha test) - N# words without punctuation = spam (captcha test) Also how about an option to render the captcha in flash as opposed to a raster graphic? $0.03 Spammers like to use poor splelling and extended ascii characters. Perhaps rules such that

- unless 90% of the words in comments are other than dictionary words it will be considered spam (captcha test)

- extended ascii = spam (captcha test)

- N# words without punctuation = spam (captcha test)

Also how about an option to render the captcha in flash as opposed to a raster graphic?

$0.03

]]> By: skippy http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-2615 skippy Wed, 30 Nov 2011 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-2615 I'm not sure how effective IP-based blacklisting is. Can you display a counter for the number of times each blacklisted IP tried to comment, once it's on the IP blacklist? I'm mostly concerned that some poor dial-up dynamic IP user is getting blocked from commenting because a spammer used a throw-away dial-up account (improbable, but possible). Also, I've noticed that many spammers are now including gibberish in their URLs. I suspect it's an attemtp to overflow the blacklists and keep the burden of processing on our side. Can you include an "invert all" option like WP does, so that I can quickly uncheck all the gibberish URLs? The same for the list of IPs to insert into the database would be helpful, too. I’m not sure how effective IP-based blacklisting is. Can you display a counter for the number of times each blacklisted IP tried to comment, once it’s on the IP blacklist? I’m mostly concerned that some poor dial-up dynamic IP user is getting blocked from commenting because a spammer used a throw-away dial-up account (improbable, but possible).

Also, I’ve noticed that many spammers are now including gibberish in their URLs. I suspect it’s an attemtp to overflow the blacklists and keep the burden of processing on our side. Can you include an “invert all” option like WP does, so that I can quickly uncheck all the gibberish URLs? The same for the list of IPs to insert into the database would be helpful, too.

]]> By: Samir M. Nassar http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1812 Samir M. Nassar Mon, 30 Nov 2009 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1812 Docteur! I'd be wonderful for SpamKarma 2.0 to separate out the sk functions from the SK interface into two separate files. It'd make spamkarma more portable and reusable. libspamkarma! :) Docteur! I’d be wonderful for SpamKarma 2.0 to separate out the sk functions from the SK interface into two separate files. It’d make spamkarma more portable and reusable. libspamkarma! :)

]]> By: himself http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1801 himself Tue, 30 Nov 2004 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1801 This plugin is the BEST antispam plugin I've ever used. Extra points for ease of install! And now onto the requests portion: - some way to share blacklist information with multiple WP sites under my control (FTP upload/download from user specified location) - SpamAssassin rules - user control over the number of characters shown in the captcha God bless and Merry Christmas This plugin is the BEST antispam plugin I’ve ever used. Extra points for ease of install! And now onto the requests portion:

- some way to share blacklist information with multiple WP sites under my control (FTP upload/download from user specified location)

- SpamAssassin rules

- user control over the number of characters shown in the captcha

God bless and Merry Christmas

]]> By: Anonymous http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1617 Anonymous Sat, 30 Nov 2002 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1617 You are doing wonderful job with spam-karma. My best congratulations from Spain ;) You are doing wonderful job with spam-karma. My best congratulations from Spain ;)

]]> By: dr Dave http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1601 dr Dave Sun, 30 Nov 2003 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1601 Ok, a quick update on the feature list: thanks a lot for all your feedbacks so far, keep'em coming... I am currently busy (well, as far as holiday schedule lets me) putting together a rather hardcore kinda p2p blacklist system... it'll probably go into a separate script (not even a plugin, as I'd like to make it blogging-platform independent) and be an important part of the system... Expect a lengthy post on this matter in the next day or so. As for all the points mentioned above, they are duly noted and will be placed atop the implementation list. The "Restore deleted", in particular, seems to be a popular one. Two request that probably won't though, and the reason one: 1) placing all comments into moderation: is obviously what SK is trying hard to avoid. Getting 1000 moderated comments that you need to sort through and manually delete is hardly an improvement at all. 2) using a table prefix for the blacklist is a point more open to debate. Basically, this is a purposeful choice, in that it allows many installs to share a common blacklist table. Which after all makes sense. Of course, there's the issue of someone entering bad stuff in the table, but we'll go on the assumption that, if they are sharing the DB, you have a minimum of trust in their abilities to not do very stupid things, or you simply do not give them access to SK (could be done by giving them a user-level < 8)... Are there any reason that we shouldn't do this and we would really want to force a prefix? I guess it would be possible to provide a configurable option for that... just wanna know if there are good reasons to. Ok, a quick update on the feature list: thanks a lot for all your feedbacks so far, keep’em coming…

I am currently busy (well, as far as holiday schedule lets me) putting together a rather hardcore kinda p2p blacklist system… it’ll probably go into a separate script (not even a plugin, as I’d like to make it blogging-platform independent) and be an important part of the system… Expect a lengthy post on this matter in the next day or so.

As for all the points mentioned above, they are duly noted and will be placed atop the implementation list. The “Restore deleted”, in particular, seems to be a popular one.
Two request that probably won’t though, and the reason one:
1) placing all comments into moderation: is obviously what SK is trying hard to avoid. Getting 1000 moderated comments that you need to sort through and manually delete is hardly an improvement at all.
2) using a table prefix for the blacklist is a point more open to debate. Basically, this is a purposeful choice, in that it allows many installs to share a common blacklist table. Which after all makes sense. Of course, there’s the issue of someone entering bad stuff in the table, but we’ll go on the assumption that, if they are sharing the DB, you have a minimum of trust in their abilities to not do very stupid things, or you simply do not give them access to SK (could be done by giving them a user-level < 8)…
Are there any reason that we shouldn’t do this and we would really want to force a prefix?
I guess it would be possible to provide a configurable option for that… just wanna know if there are good reasons to.

]]> By: Anonymous http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1594 Anonymous Wed, 30 Nov 2005 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1594 What about use the table prefix?? All tables of wordpress use table prefix, but Spam Karma doesn't do it. Why? What about use the table prefix?? All tables of wordpress use table prefix, but Spam Karma doesn’t do it. Why?

]]> By: Mark J http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1428 Mark J Sun, 30 Nov 2003 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1428 - Restore deleted comment - Show version number - Add "This comment is spam" to comment notification e-mail for spams that get through. This should blacklist any URIs, and send the spam to a centralized database so you can learn from the spam that gets through. - Restore deleted comment
- Show version number
- Add “This comment is spam” to comment notification e-mail for spams that get through. This should blacklist any URIs, and send the spam to a centralized database so you can learn from the spam that gets through.

]]> By: Tony http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1361 Tony Sun, 30 Nov 2003 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1361 Yes, I would really like to see a 'restore deleted comment' feature! Yes, I would really like to see a ‘restore deleted comment’ feature!

]]> By: Sebastian http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1181 Sebastian Mon, 30 Nov 2009 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1181 Huh, what else? That sounds more than enough to me. You're not only doing a fantastic job here, you declare war to those criminals! Today Spam Karma defended my site against the first spam wave I've recieved - it still does. Awesome! Thank you! Huh, what else? That sounds more than enough to me. You’re not only doing a fantastic job here, you declare war to those criminals!

Today Spam Karma defended my site against the first spam wave I’ve recieved - it still does.
Awesome! Thank you!

]]> By: skippy http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1140 skippy Wed, 30 Nov 2011 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1140 Please display the version number of the plugin in it's management page, so we can tell straightaway which version we're using! Please display the version number of the plugin in it’s management page, so we can tell straightaway which version we’re using!

]]> By: Ryan http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1117 Ryan Tue, 30 Nov 2004 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1117 One good feature would be to have all spam comments automatically placed in modertation. One good feature would be to have all spam comments automatically placed in modertation.

]]> By: Dr Dave's Blog » Tip Jar http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1078 Dr Dave's Blog » Tip Jar Fri, 30 Nov 2001 00:00:00 +0000 http://unknowngenius.com/blog/archives/2004/12/09/spam-karma-20-feature-requests/#comment-1078 Donations, straight this way [...] Donations, straight this way [...]

]]>