The Big Void In WordPress Comment Spam Protection大无效在WordPress评论垃圾邮件防护
I have experiemented with all the available WordPress plugins for comment spam protection including but not limited to Bad Behaviour, Spam Karma 2, Akismet and built-in WordPress features like blacklists and moderation queue.我experiemented与所有可用的wordpress插件为垃圾评论的保护,包括但不限于恶劣的行为,垃圾邮件的因果报应2 , akismet和内置在WordPress的功能,例如黑名单和审阅队列。 We have to deal with tens of thousands of spam everyday.我们要处理成千上万的垃圾邮件,每天。 The key problem with all of these plugins is high rate of false positives along with some false negatives too.关键的问题,与所有这些插件是高企的假阳性,随着一些假阴性。 In plugins where false negatives are low (like Spam Karma or Bad Behaviour), false positives are unacceptably high.在插件的地方假阴性是低的(如垃圾邮件的因果报应或坏的行为) ,假阳性是高得令人无法接受。 False positive is a condition where a legitimate comment is identified as spam.假阳性是一个条件,凡合法的评论被确定为垃圾邮件。 It is a much bigger problem than false negatives (inability to mark a spam comment as spam).这是一个更大的问题比假阴性(无法马克垃圾评论为垃圾邮件) 。 While false negatives are a problem in terms of annoyance, false positives are much bigger problem.而假阴性是一个问题,在条款的烦扰,假阳性是更大的问题。 It causes you to potentially lose valuable comments, feedback and even business opportunity; I speak from first-hand experience.它的原因你可能失去宝贵的意见,反馈,甚至商业机会;我发言,从第一手的经验。
In brief my experiences with these plugins are:在简短的我的经验,与这些插件是:
Bad Behaviour不良行为 had in the past prevented legitimate comments from appearing in my blog.曾在过去的阻止合法的意见,从出现在我的博客。 Posting of a comment used to silently fail after displaying a blank page.张贴评论用来默默耕耘,失败后,显示一个空白页。 The error was sporadic which made it harder to debug.错误是零星这使得更难调试。 After several months of sporadic complaints from my users I finally realized Bad Behaviour was the one to blame.经过数月的零星投诉,从我的用户我终于实现了不良行为的一个责任。 There has been few releases since but I haven’t looked at it again.有已数发布以来,但我并没有看过一遍。 I have had complaints about it from other users about lack of support.我曾抱怨它从其他用户缺乏支持。
Spam Karma 2垃圾邮件的因果报应2 used to a venomous plugin.用一个恶毒的插件。 It has been known to insult legitimate commenters of a blog after misjudging them as spammers.它已经知道侮辱的合法提意见的一个博客后, misjudging他们当作垃圾邮件发送者。 I have been told it improved its potty mouth.有人告诉我它改善其厕所口。 But the underlying problem remains.但潜在的问题仍然存在。 It uses over aggresive techniques which leads to high incidence of false positives.它使用超过咄咄逼人的技术,导致发病率高的假阳性。 Installation used to be a problem, so much that its author used to ship a version of WordPress with the plugin installed!安装使用的是一个问题,这么多,它的作者用于船舶的一个版本的WordPress与插件安装! I have had bad experiences with it in the past and strongly advice my friends and clients against using it.我有不好的经验与它在过去和强烈的意见,我的朋友和客户对使用它。
I personally looked in the code for Bad Behaviour and found several over-aggresive, hard-to-justify logic which leads to their high false positive rates.我个人期待在代码中不良的行为和发现的几个过度aggresive ,努力向自圆其说的逻辑,从而导致他们的高假阳性率。
I too provide an anti-spam plugin -我也提供了一个反垃圾邮件插件- Referrer Bouncer引荐bouncer . 。 Unlike its counterparts Referer Bouncer doesn’t normally give false positives.不像其对应referer bouncer通常不给假阳性。 However it requires active management of the list for best performance which may not be possible for average joe bloggers.不过它需要积极管理该名单的最佳表现,可能无法平均乔博客。 Also Referrer Bouncer tackles only one class of spams - referrer spams or spams with a referrer payload.也引荐bouncer处理,只有一类垃圾邮件-引荐或滥发垃圾邮件与引荐的有效载荷。 While it is an important category of spam, a lot of spams these days doesn’t come with referrer payload.虽然这是一项重要的一类垃圾邮件,大量的垃圾邮件,这些天不来与引荐的有效载荷。
Let’s talk about让我们说说 Akismet akismet , a popular anti-spam plugin from the creators of WordPress.一个受欢迎的反垃圾邮件插件,从创作者的WordPress的。 Akismet is a blunder in terms of vision and to some extent architecture. akismet是一个失误,在条款的视野,并在一定程度上建筑。 Akismet works by relying on individual bloggers to train it to identify spam. akismet工程,依靠个别博客列车它来识别垃圾邮件。 While it looks good in theory, in practice there are two types of bloggers - bloggers and sploggers.虽然它看起来很不错,在理论,在实践中有两种类型的博客-博客和s ploggers。 Spam bloggers or sploggers have made it a game to game Akismet as it is very easy to do so.垃圾邮件博客或sploggers作出了一个游戏,游戏akismet ,因为这是很容易这样做。 You can, for example, write a simple script to feed to akismet that a certain legitimate blogger is spammer and then in future all his comments will be marked as spam.你可以,举例来说,写一个简单的脚本,以饲料,以akismet认为某一个合法的Blogger是垃圾邮件发送者,然后在未来所有他的意见将被标记为垃圾邮件。 The reverse is also true.反向也是如此。 Today I get several hundred spams a day which have passed through Akismet.今天,我得到数百名垃圾邮件,每天有通过akismet 。 I also get some of the legitimate comments marked as spam and held in moderation queue by Akismet.我也得到一些合法的意见,标示为垃圾邮件,并举行了在审阅队列由akismet 。 Unfortunately I am unable to even look in my Akismet queue as there are several thousands entries in these queue.可惜我不能看,甚至在我的akismet队列中有数千参赛作品在这些队列中。 My pet blog has over 5000 entries in manual moderation queue which have passed through Akismet.我的宠物博客已超过5000项,手册审核伫列,其中已通过akismet 。 My browser fails to even load that page!我的浏览器无法负荷,甚至该网页!
The other problem with Akismet is the size of the Akismet queue.其他问题akismet是大小的akismet队列中。 It holds together the comments for manual review and training.它拥有共同的意见,为人工审查和培训。 Unfortunately any popular blogger is likely to get several thousands of spams in Akismet queue, making it virtually impossible to manually identify spam versus ham.不幸的任何流行的Blogger是有可能得到数千akismet垃圾邮件在队列中,使得几乎不可能以手动方式来识别垃圾邮件银两火腿。 Akismet doesn’t even provide paging of that screen, a minor technological glitch compared to the humongous mistake in vision of relying on any blogger to help it. akismet甚至没有提供传呼该屏幕上,一个小故障的技术相比,该humongous的错误视觉,依靠任何的Blogger ,以帮助它。
Many bloggers prefer stacking anti-spam plugins like Akismet with Spam Karma 2 or Akismet with Bad Behaviour.许多Blogger喜欢堆积的反垃圾邮件插件一样, akismet与垃圾邮件的因果报应2或akismet与不良的行为。 Unfortunately the effects are even more worse and undetermined in many cases.很可惜,效果更差,未确定在许多情况下。 These plugins haven’t been designed or tested to play well with each other.这些插件没有设计或测试,以发挥好与对方。 It requires lots of testing to ensure that you aren’t breaking something.它需要大量的测试,以确保你不打破东西。 Also adding two plugins, each of which gives false positives, is only going to compound the problem.此外,加入两个插件,每个使假阳性,这只是去复合的问题。 You will often find in the wild someone praising plugin x or y.你会经常发现在野生有人称赞插件X或耀 In reality most of them don’t understand how these plugins work and they don’t know or don’t care how much legitimate and valuable comments they are missing.在现实中,他们大多不明白如何将这些插件的工作和他们不知道或不关心有多少合法和宝贵意见,他们是失踪。
There are two other aspects of spam blogging which you should be aware of.有两个其他方面的垃圾邮件,博客,你应该知道。 Anti spam plugins like Spam Karma or Akismet rely on MySQL database queries to help it identify and / or store spam, which increase your database load.反垃圾邮件插件一样,垃圾邮件的因果报应或akismet依赖于MySQL数据库的查询,以帮助它识别和/或存储的垃圾邮件,从而增加了您的数据库负载。 Akismet relies on communicating with its server to identify spams. akismet依赖于沟通与它的服务器,找出垃圾邮件。 So not only you are getting these spams, your server as well your database is being loaded and you are wasting bandwidth in communicating with external servers.因此,不仅是您获得这些垃圾邮件,您的伺服器,以及您的数据库正在装货和你是浪费带宽,在沟通与外部的服务器。 It is not a coincidence that many WordPress bloggers are being booted out of their shared hosting environments and forced to go for VPN or dedicated hosting.这决不是偶然,很多的WordPress博客正在启动了他们的共同主办的环境和被迫去为VPN或专用主机托管。 I moved to dedicated hosting a year ago.我提出以专用主机托管一年前。 After extensive tests I clearly identified that the majority of load on my server is due to spam comment processing.经过广泛的测试,我清楚发现,大多数载荷对我的服务器是由于垃圾邮件的评论处理。
The key to comment spam prevention is understanding the psyche of a spammer (more on it later).关键垃圾评论的预防是理解的心灵垃圾邮件(更多的后来) 。 A good spam prevention plugin should at least ensure zero (or extremely close to zero) false positives.一个良好的垃圾邮件预防插件至少应确保零(或非常接近零)假阳性。 If that means few false negatives that is acceptable.如果这意味着数假阴性认为是可以接受的。 Anti-spam plugins should be stackable or at least have their own plugin architecture.反垃圾邮件插件,应可堆叠,或至少有自己的插件架构。 Any takers?任何的行动呢?
Filed under提起下 CMS Software CMS软件 , , Database数据库 , , Hardware硬件 , , Headline News头条新闻 , , Open Source Software开放源码软件 , , Pro Blogging赞成Blogging , , RDBMS RDBMS的 , , Spam Watch垃圾邮件观赏 , , Tech Note技术说明 , , Web网页 , , Web Hosting虚拟主机 , , Web Services Web服务 , , WordPress在WordPress | |
| |
RSS 2.0 2.0 | |
Trackback Trackback跟踪 this Article |此文章|
Email this Article电子邮件此文章
You may also like to read您也可以想读 |





January 16th, 2007 at 5:07 am 2007年1月16日在上午05时07分
Thank you for your post, it was an interesting read, although I do not agree with your assesment of Akismet.感谢您为您的文章,这是一个有趣的阅读,虽然我不同意你的评价akismet 。 I have been very happy with it since my blog took off, and started recieving 200+ visitors per day.我一直很高兴,因为我的博客脱掉,并开始接受200 +旅客每天。 I have not so far recieved a false positive, but one or two might have slipped my otherwise keen eyes我至今没有收到假阳性,但一个或两个有可能下滑,否则我渴望的眼睛
I am curious to see how Bad Behaviour will turn out.我很好奇,看看如何恶劣的行为,会变成。 I actually happened to install it yesterday, and one of the things I was immediately annoyed with, was the lack of information/configuration.我其实是发生在把它安装在昨天,事情之一,我立即与烦恼,是缺乏信息/配置。 It has, however, removed several hundred attempted referrer spam visits that I usually suffer from.它,不过,拆除数百名企图引荐垃圾邮件的访问,我通常会受到从。
I will give it a try for a week or two, and see what happens.我会一试为一,两个星期,看看会发生什么情况。
January 16th, 2007 at 8:17 am 2007年1月16日在上午8时17分
I use Akismet and BadBehaviour : BB blocks all unusual attempts at the door of the blog and Akismet takes care of the eventual spam that *could* have gotten through.我用akismet和badbehaviour : bb的阻止所有不寻常的企图在门的博客和akismet照顾的最终垃圾邮件*可*获得了通过。 I have to say those two stack pretty well as I used to have thousands of spams everyday and it’s been months since I last got one.我必须说,这两个协议栈相当不错,正如我所用,以有数以千计的垃圾邮件,每天和它的被个月以来,我上次得到一。
No more checking the Akismet queue, yay !没有更多的检查akismet队列, yay !
January 16th, 2007 at 8:40 am 2007年1月16日在上午8时40分
Really?真的吗? Is BB2 doing so worse things to your blog?是bb2这样做,更糟的东西,到您的博客? I haven’t realized it since I have installed it.我还没有实现它,因为我已经安装了它。 Even when I use anonymous surfing I’m able to comment on my blog.甚至当我使用匿名冲浪我可以发表评论我的博客。
Well, yes.以及,是的。 BB2 lacks of support and config options. bb2缺乏的支持和配置选项。 But you need to know that we plug-in coders (like mine) are doing our job (coding cool plug-ins) for free - so in our free-time.但你需要知道,我们的外挂在编码(如排雷)正在做我们的工作(编码冷静的插件)为免费的-因此,在我们的自由时间。 So we don’t earn money from it.所以我们不赚钱。 Well, I don’t want money for my plug-in (see my blog for instance, not adverts here!) because it’s not a commercial one.好,我不想为我的钱,外挂在(见我的博客举例来说,没有广告,在这里! ) ,因为它不是一个商业之一。 But I want that you know that I have already spent lot’s of time in my plug-in.但我想你知道我已经用了很多的时间,在我的外挂程式。
I guess Michael Hampton can say the same on this point.我猜想迈克尔汉普顿可以说,同样的在这一点上。 He has a real life and a real job (I hope so?) and BB2 is being developed in his free-time, too.他有一个真正的生活和真正的工作(我希望如此? )和bb2正在制定在他的自由时间,太多。 And the same for SK2…和同为sk2 …
But I will keep BB2,SK2 and Akismet (even about your discovered security/privacy concerns because I have the knowledge to hack the plug-in a little) because I want to help Michael and Dr. Dave for testing their software on my blog.但我会继续bb2 , sk2和akismet (即使你发现的安全/隐私权的关切,因为我有知识,以哈克外挂程式在一个小) ,因为我想帮助Michael和博士戴夫测试他们的软件对我的博客。
January 16th, 2007 at 9:20 am 2007年1月16日在上午09时20分
@ Matt @马特
An even simpler configuration is to prevent commenting at all一个更简单的配置是为了防止在所有评论
Seriously though what I am trying to highlight is more about the problem of misidentification of genuine comments as spam.认真,虽然是什么我想强调的是更多有关的问题,误认真正的评论为垃圾邮件。 If you care about your readers (and potential clients for some) then you should look closely into what they are doing and not simply the fact that they are preventing spams (along with hams).如果您关心您的读者(和潜在的客户,为一些) ,那么你应该仔细考虑到他们在做什么,而不是简单事实,即他们是防止垃圾邮件(连同火腿) 。
Quix0r> Even when I use anonymous surfing I’m able to comment on my blog. quix0r > ,甚至当我使用匿名冲浪我可以发表评论我的博客。
That is not an indicator of success.这不是一个指标,成功的。 Check the BB code to see more about what it is doing.检查的BB代码看到更多的关于在做什么。
> But you need to know that we plug-in coders (like mine) are doing our job (coding cool plug-ins) for free - so in our free-time. >但是你需要知道,我们的外挂在编码(如排雷)正在做我们的工作(编码冷静的插件)为免费的-因此,在我们的自由时间。 So we don’t earn money from it.所以我们不赚钱。
I understand the pain and limitations of free plugin authors.据我所知的痛苦和限制的免费插件作者。 I too offer several popular我也提供几个热门 WordPress plugins for free wordpress插件为免费 . 。
The underlying fact is that as the product is free it also comes with limited support (time permitting) and zero liability.基本的事实是,作为产品是免费的,它也附带了有限的支持(时间允许)及零责任。 While it is fully understandable from the plugin authors point of view, it may not be acceptable from many bloggers point of view who would be willing to sponsor for high quality plugins and software to maintain high standards for their blogs.而它是完全可以理解的,从插件作者的角度来看,它可能是不能接受的,从许多Blogger的角度来看,谁愿意赞助,为高品质的插件和软件,以维持高标准,在其博客。
> Well, I don’t want money for my plug-in (see my blog for instance, not adverts here!) because it’s not a commercial one. >好,我不想为我的钱,外挂在(见我的博客举例来说,没有广告,在这里! ) ,因为它不是一个商业之一。 But I want that you know that I have already spent lot’s of time in my plug-in.但我想你知道我已经用了很多的时间,在我的外挂程式。
I understand your sentiments fully as I explained above.我明白你的情绪,充分正如我以上所解释的。 However the key point is as the platform is maturing so is the need for high quality products which are well supported.但是关键的一点是,由于平台是成熟的,所以是需要高品质的产品,这是十分支持。 It is with this view I released my first paid plugin -这是这个看法i发表我第一次支付的插件- Translator Plugin Pro翻译插件亲 for providing translation of WordPress blogs in 14 languages.提供翻译WordPress Blogs的14种语言。 But I digress.但我偏离。 I am not criticising the free plugin authors per se.我不是批评免费插件作者本身。 I am in the same seat as they are.我在同一个座位,因为他们。 I am simply pointing out some limitations of current anti-spam products and solutions.我只是指出一些局限性,目前的反垃圾邮件产品和解决方案。 There is a poem by poet and nobel laureate, Rabindranath Tagore, which roughly translated in English is:有一首诗,诗人,诺贝尔和平奖得主,泰戈尔,大致翻译,在英语是:
“I close the doors to prevent lies from entering my mind, I then also close the door for truth”. “我关闭的门,以防止在于从进入我心目中,我当时也关门,为真理” 。 Replace lies with spams and truth with ham and you can see what I am trying to convey取代在于垃圾邮件和真理与火腿和你可以看到什么我想传达
Thanks for all of your insightful comments.感谢您所有的有见识的意见。
January 16th, 2007 at 9:48 am 2007年1月16日在上午09时48分
[...] « The Big Void In WordPress Comment Spam Protection Is Google AdSense Losing Its Relevance January 16th, 2007 by Angsuman Chakraborty [...] [ … … ] «大无效在WordPress评论垃圾邮件防护是Google AdSense失去其相关性2007年1月16日由日由Angsuman Chakraborty [ … … ]
January 16th, 2007 at 2:33 pm 2007年1月16日在下午2时33分
Sorry to keep this so brief, but I’m in a bit of a hurry and can elaborate on this later if you’d like.抱歉,保持这样的简单,但我在有点着急,可以阐述这稍后如果您想要。
I’m currently using the combined efforts of Bad Behavior and Akismet and experience, on average, one false negative per month.我目前使用的联合努力,不良行为和akismet和经验,平均来说,一个假阴性每月。 I also block the IPs of repeat offenders (more than five spam comments submitted per day) for a maximum of seven days.我也座的IP是屡犯者(五年以上的垃圾邮件提交的评论每天)为最多七天。
Judging by your experience with Bad Behavior, I strongly recommend that you try the most recent version (currently v2.0.9).从您的经验,与不良行为,我强烈建议您尝试的是最新版本(目前v2.0.9 ) 。 Most of the recent fixes have been geared toward dramatically lowering the amount of false positives.最近大部分修复已面向大幅降低的数额假阳性。 More information is available on Michael Hampton’s Bad Behavior blog,更多信息可在迈克尔汉普顿的不良行为博客, Lunacy Unleashed lunacy释放 . 。
I also recommend that you try the most recent version of Akismet (currently v1.2.1).我也建议您尝试的是最新版本的akismet (目前v1.2.1 ) 。 The current version introduced a paginated view of spam comments, which dramatically shortens load times, but I’m not sure if it paginates the moderation que, as I have never had a moderation que as large as yours.目前的版本推出了页码鉴于垃圾邮件的评论,这大大缩短了载入时间,但我不知道,如果它paginates温和阙,正如我从来没有放缓,阙大如你。
October 16th, 2007 at 5:02 am 2007年10月16日在上午05时02分
Hi Angsuman喜由Angsuman
Just wondering if you know how to force Wordpress blacklist deletion to take place *before* Akismet kicks in. That would seem to be the best thing for it to do.只是不知道,如果你知道如何强制的WordPress的黑名单中删除,以采取地方*之前* akismet踢英寸这似乎是最好的事,它做的。
January 20th, 2008 at 3:55 am 2008年1月20日在上午03时55分
I agree about Bad Behavior…I\’ve had problems with it too and I\’ve read it sometimes blocks Google.我同意关于不良行为… …我\ '维生素E出现了问题,它也和我\ '维生素E读它有时拦截Google 。 One time it locked me and everyone else out of my blog.一时间,锁定我和其他所有人对我的博客。 My rankings on one blog went up as soon as I disabled it.我的排名就一博客上升尽快正如我残疾人士。