The Big Void In WordPress Comment Spam Protection大無效在WordPress評論垃圾郵件防護
I have experiemented with all the available WordPress plugins for comment spam protection including but not limited to Bad Behaviour, Spam Karma 2, Akismet and built-in WordPress features like blacklists and moderation queue.我experiemented與所有可用的wordpress插件為垃圾評論的保護,包括但不限於惡劣的行為,垃圾郵件的因果報應2 , akismet和內置在WordPress的功能,例如黑名單和審閱隊列。 We have to deal with tens of thousands of spam everyday.我們要處理成千上萬的垃圾郵件,每天。 The key problem with all of these plugins is high rate of false positives along with some false negatives too.關鍵的問題,與所有這些插件是高企的假陽性,隨著一些假陰性。 In plugins where false negatives are low (like Spam Karma or Bad Behaviour), false positives are unacceptably high.在插件的地方假陰性是低的(如垃圾郵件的因果報應或壞的行為) ,假陽性是高得令人無法接受。 False positive is a condition where a legitimate comment is identified as spam.假陽性是一個條件,凡合法的評論被確定為垃圾郵件。 It is a much bigger problem than false negatives (inability to mark a spam comment as spam).這是一個更大的問題比假陰性(無法馬克垃圾評論為垃圾郵件) 。 While false negatives are a problem in terms of annoyance, false positives are much bigger problem.而假陰性是一個問題,在條款的煩擾,假陽性是更大的問題。 It causes you to potentially lose valuable comments, feedback and even business opportunity; I speak from first-hand experience.它的原因你可能失去寶貴的意見,反饋,甚至商業機會;我發言,從第一手的經驗。
In brief my experiences with these plugins are:在簡短的我的經驗,與這些插件是:
Bad Behaviour不良行為 had in the past prevented legitimate comments from appearing in my blog.曾在過去的阻止合法的意見,從出現在我的博客。 Posting of a comment used to silently fail after displaying a blank page.張貼評論用來默默耕耘,失敗後,顯示一個空白頁。 The error was sporadic which made it harder to debug.錯誤是零星這使得更難調試。 After several months of sporadic complaints from my users I finally realized Bad Behaviour was the one to blame.經過數月的零星投訴,從我的用戶我終於實現了不良行為的一個責任。 There has been few releases since but I haven’t looked at it again.有已數發布以來,但我並沒有看過一遍。 I have had complaints about it from other users about lack of support.我曾抱怨它從其他用戶缺乏支持。
Spam Karma 2垃圾郵件的因果報應2 used to a venomous plugin.用一個惡毒的插件。 It has been known to insult legitimate commenters of a blog after misjudging them as spammers.它已經知道侮辱的合法提意見的一個博客後, misjudging他們當作垃圾郵件發送者。 I have been told it improved its potty mouth.有人告訴我它改善其廁所口。 But the underlying problem remains.但潛在的問題仍然存在。 It uses over aggresive techniques which leads to high incidence of false positives.它使用超過咄咄逼人的技術,導致發病率高的假陽性。 Installation used to be a problem, so much that its author used to ship a version of WordPress with the plugin installed!安裝使用的是一個問題,這麼多,它的作者用於船舶的一個版本的WordPress與插件安裝! I have had bad experiences with it in the past and strongly advice my friends and clients against using it.我有不好的經驗與它在過去和強烈的意見,我的朋友和客戶對使用它。
I personally looked in the code for Bad Behaviour and found several over-aggresive, hard-to-justify logic which leads to their high false positive rates.我個人期待在代碼中不良的行為和發現的幾個過度aggresive ,努力向自圓其說的邏輯,從而導致他們的高假陽性率。
I too provide an anti-spam plugin -我也提供了一個反垃圾郵件插件- Referrer Bouncer引薦bouncer . 。 Unlike its counterparts Referer Bouncer doesn’t normally give false positives.不像其對應referer bouncer通常不給假陽性。 However it requires active management of the list for best performance which may not be possible for average joe bloggers.不過它需要積極管理該名單的最佳表現,可能無法平均喬博客。 Also Referrer Bouncer tackles only one class of spams - referrer spams or spams with a referrer payload.也引薦bouncer處理,只有一類垃圾郵件-引薦或濫發垃圾郵件與引薦的有效載荷。 While it is an important category of spam, a lot of spams these days doesn’t come with referrer payload.雖然這是一項重要的一類垃圾郵件,大量的垃圾郵件,這些天不來與引薦的有效載荷。
Let’s talk about讓我們說說 Akismet akismet , a popular anti-spam plugin from the creators of WordPress.一個受歡迎的反垃圾郵件插件,從創作者的WordPress的。 Akismet is a blunder in terms of vision and to some extent architecture. akismet是一個失誤,在條款的視野,並在一定程度上建築。 Akismet works by relying on individual bloggers to train it to identify spam. akismet工程,依靠個別博客列車它來識別垃圾郵件。 While it looks good in theory, in practice there are two types of bloggers - bloggers and sploggers.雖然它看起來很不錯,在理論,在實踐中有兩種類型的博客-博客和s ploggers。 Spam bloggers or sploggers have made it a game to game Akismet as it is very easy to do so.垃圾郵件博客或sploggers作出了一個遊戲,遊戲akismet ,因為這是很容易這樣做。 You can, for example, write a simple script to feed to akismet that a certain legitimate blogger is spammer and then in future all his comments will be marked as spam.你可以,舉例來說,寫一個簡單的腳本,以飼料,以akismet認為某一個合法的Blogger是垃圾郵件發送者,然後在未來所有他的意見將被標記為垃圾郵件。 The reverse is also true.反向也是如此。 Today I get several hundred spams a day which have passed through Akismet.今天,我得到數百名垃圾郵件,每天有通過akismet 。 I also get some of the legitimate comments marked as spam and held in moderation queue by Akismet.我也得到一些合法的意見,標示為垃圾郵件,並舉行了在審閱隊列由akismet 。 Unfortunately I am unable to even look in my Akismet queue as there are several thousands entries in these queue.可惜我不能看,甚至在我的akismet隊列中有數千參賽作品在這些隊列中。 My pet blog has over 5000 entries in manual moderation queue which have passed through Akismet.我的寵物博客已超過5000項,手冊審核佇列,其中已通過akismet 。 My browser fails to even load that page!我的瀏覽器無法負荷,甚至該網頁!
The other problem with Akismet is the size of the Akismet queue.其他問題akismet是大小的akismet隊列中。 It holds together the comments for manual review and training.它擁有共同的意見,為人工審查和培訓。 Unfortunately any popular blogger is likely to get several thousands of spams in Akismet queue, making it virtually impossible to manually identify spam versus ham.不幸的任何流行的Blogger是有可能得到數千akismet垃圾郵件在隊列中,使得幾乎不可能以手動方式來識別垃圾郵件銀兩火腿。 Akismet doesn’t even provide paging of that screen, a minor technological glitch compared to the humongous mistake in vision of relying on any blogger to help it. akismet甚至沒有提供傳呼該屏幕上,一個小故障的技術相比,該humongous的錯誤視覺,依靠任何的Blogger ,以幫助它。
Many bloggers prefer stacking anti-spam plugins like Akismet with Spam Karma 2 or Akismet with Bad Behaviour.許多Blogger喜歡堆積的反垃圾郵件插件一樣, akismet與垃圾郵件的因果報應2或akismet與不良的行為。 Unfortunately the effects are even more worse and undetermined in many cases.很可惜,效果更差,未確定在許多情況下。 These plugins haven’t been designed or tested to play well with each other.這些插件沒有設計或測試,以發揮好與對方。 It requires lots of testing to ensure that you aren’t breaking something.它需要大量的測試,以確保你不打破東西。 Also adding two plugins, each of which gives false positives, is only going to compound the problem.此外,加入兩個插件,每個使假陽性,這只是去複合的問題。 You will often find in the wild someone praising plugin x or y.你會經常發現在野生有人稱讚插件X或耀 In reality most of them don’t understand how these plugins work and they don’t know or don’t care how much legitimate and valuable comments they are missing.在現實中,他們大多不明白如何將這些插件的工作和他們不知道或不關心有多少合法和寶貴意見,他們是失踪。
There are two other aspects of spam blogging which you should be aware of.有兩個其他方面的垃圾郵件,博客,你應該知道。 Anti spam plugins like Spam Karma or Akismet rely on MySQL database queries to help it identify and / or store spam, which increase your database load.反垃圾郵件插件一樣,垃圾郵件的因果報應或akismet依賴於MySQL數據庫的查詢,以幫助它識別和/或存儲的垃圾郵件,從而增加了您的數據庫負載。 Akismet relies on communicating with its server to identify spams. akismet依賴於溝通與它的服務器,找出垃圾郵件。 So not only you are getting these spams, your server as well your database is being loaded and you are wasting bandwidth in communicating with external servers.因此,不僅是您獲得這些垃圾郵件,您的伺服器,以及您的數據庫正在裝貨和你是浪費帶寬,在溝通與外部的服務器。 It is not a coincidence that many WordPress bloggers are being booted out of their shared hosting environments and forced to go for VPN or dedicated hosting.這決不是偶然,很多的WordPress博客正在啟動了他們的共同主辦的環境和被迫去為VPN或專用主機託管。 I moved to dedicated hosting a year ago.我提出以專用主機託管一年前。 After extensive tests I clearly identified that the majority of load on my server is due to spam comment processing.經過廣泛的測試,我清楚發現,大多數載荷對我的服務器是由於垃圾郵件的評論處理。
The key to comment spam prevention is understanding the psyche of a spammer (more on it later).關鍵垃圾評論的預防是理解的心靈垃圾郵件(更多的後來) 。 A good spam prevention plugin should at least ensure zero (or extremely close to zero) false positives.一個良好的垃圾郵件預防插件至少應確保零(或非常接近零)假陽性。 If that means few false negatives that is acceptable.如果這意味著數假陰性認為是可以接受的。 Anti-spam plugins should be stackable or at least have their own plugin architecture.反垃圾郵件插件,應可堆疊,或至少有自己的插件架構。 Any takers?任何的行動呢?
Filed under提起下 CMS Software CMS軟件 , , Database數據庫 , , Hardware硬件 , , Headline News頭條新聞 , , Open Source Software開放源碼軟件 , , Pro Blogging贊成Blogging , , RDBMS RDBMS的 , , Spam Watch垃圾郵件觀賞 , , Tech Note技術說明 , , Web網頁 , , Web Hosting虛擬主機 , , Web Services Web服務 , , WordPress在WordPress | |
| |
RSS 2.0 2.0 | |
Trackback Trackback跟踪 this Article |此文章|
Email this Article電子郵件此文章
You may also like to read您也可以想讀 |





January 16th, 2007 at 5:07 am 2007年1月16日在上午05時07分
Thank you for your post, it was an interesting read, although I do not agree with your assesment of Akismet.感謝您為您的文章,這是一個有趣的閱讀,雖然我不同意你的評價akismet 。 I have been very happy with it since my blog took off, and started recieving 200+ visitors per day.我一直很高興,因為我的博客脫掉,並開始接受200 +旅客每天。 I have not so far recieved a false positive, but one or two might have slipped my otherwise keen eyes我至今沒有收到假陽性,但一個或兩個有可能下滑,否則我渴望的眼睛
I am curious to see how Bad Behaviour will turn out.我很好奇,看看如何惡劣的行為,會變成。 I actually happened to install it yesterday, and one of the things I was immediately annoyed with, was the lack of information/configuration.我其實是發生在把它安裝在昨天,事情之一,我立即與煩惱,是缺乏信息/配置。 It has, however, removed several hundred attempted referrer spam visits that I usually suffer from.它,不過,拆除數百名企圖引薦垃圾郵件的訪問,我通常會受到從。
I will give it a try for a week or two, and see what happens.我會一試為一,兩個星期,看看會發生什麼情況。
January 16th, 2007 at 8:17 am 2007年1月16日在上午8時17分
I use Akismet and BadBehaviour : BB blocks all unusual attempts at the door of the blog and Akismet takes care of the eventual spam that *could* have gotten through.我用akismet和badbehaviour : bb的阻止所有不尋常的企圖在門的博客和akismet照顧的最終垃圾郵件*可*獲得了通過。 I have to say those two stack pretty well as I used to have thousands of spams everyday and it’s been months since I last got one.我必須說,這兩個協議棧相當不錯,正如我所用,以有數以千計的垃圾郵件,每天和它的被個月以來,我上次得到一。
No more checking the Akismet queue, yay !沒有更多的檢查akismet隊列, yay !
January 16th, 2007 at 8:40 am 2007年1月16日在上午8時40分
Really?真的嗎? Is BB2 doing so worse things to your blog?是bb2這樣做,更糟的東西,到您的博客? I haven’t realized it since I have installed it.我還沒有實現它,因為我已經安裝了它。 Even when I use anonymous surfing I’m able to comment on my blog.甚至當我使用匿名衝浪我可以發表評論我的博客。
Well, yes.以及,是的。 BB2 lacks of support and config options. bb2缺乏的支持和配置選項。 But you need to know that we plug-in coders (like mine) are doing our job (coding cool plug-ins) for free - so in our free-time.但你需要知道,我們的外掛在編碼(如排雷)正在做我們的工作(編碼冷靜的插件)為免費的-因此,在我們的自由時間。 So we don’t earn money from it.所以我們不賺錢。 Well, I don’t want money for my plug-in (see my blog for instance, not adverts here!) because it’s not a commercial one.好,我不想為我的錢,外掛在(見我的博客舉例來說,沒有廣告,在這裡! ) ,因為它不是一個商業之一。 But I want that you know that I have already spent lot’s of time in my plug-in.但我想你知道我已經用了很多的時間,在我的外掛程式。
I guess Michael Hampton can say the same on this point.我猜想邁克爾漢普頓可以說,同樣的在這一點上。 He has a real life and a real job (I hope so?) and BB2 is being developed in his free-time, too.他有一個真正的生活和真正的工作(我希望如此? )和bb2正在制定在他的自由時間,太多。 And the same for SK2…和同為sk2 …
But I will keep BB2,SK2 and Akismet (even about your discovered security/privacy concerns because I have the knowledge to hack the plug-in a little) because I want to help Michael and Dr. Dave for testing their software on my blog.但我會繼續bb2 , sk2和akismet (即使你發現的安全/隱私權的關切,因為我有知識,以哈克插件在一小) ,因為我想幫助Michael和博士戴夫測試他們的軟件對我的博客。
January 16th, 2007 at 9:20 am 2007年1月16日在上午09時20分
@ Matt @馬特
An even simpler configuration is to prevent commenting at all一個更簡單的配置是為了防止在所有評論
Seriously though what I am trying to highlight is more about the problem of misidentification of genuine comments as spam.認真,雖然是什麼我想強調的是更多有關的問題,誤認真正的評論為垃圾郵件。 If you care about your readers (and potential clients for some) then you should look closely into what they are doing and not simply the fact that they are preventing spams (along with hams).如果您關心您的讀者(和潛在的客戶,為一些) ,那麼你應該仔細考慮到他們在做什麼,而不是簡單事實,即他們是防止垃圾郵件(連同火腿) 。
Quix0r> Even when I use anonymous surfing I’m able to comment on my blog. quix0r > ,甚至當我使用匿名衝浪我可以發表評論我的博客。
That is not an indicator of success.這不是一個指標,成功的。 Check the BB code to see more about what it is doing.檢查的BB代碼看到更多的關於在做什麼。
> But you need to know that we plug-in coders (like mine) are doing our job (coding cool plug-ins) for free - so in our free-time. >但是你需要知道,我們的外掛在編碼(如排雷)正在做我們的工作(編碼冷靜的插件)為免費的-因此,在我們的自由時間。 So we don’t earn money from it.所以我們不賺錢。
I understand the pain and limitations of free plugin authors.據我所知的痛苦和限制的免費插件作者。 I too offer several popular我也提供幾個熱門 WordPress plugins for free wordpress插件為免費 . 。
The underlying fact is that as the product is free it also comes with limited support (time permitting) and zero liability.基本的事實是,作為產品是免費的,它也附帶了有限的支持(時間允許)及零責任。 While it is fully understandable from the plugin authors point of view, it may not be acceptable from many bloggers point of view who would be willing to sponsor for high quality plugins and software to maintain high standards for their blogs.而它是完全可以理解的,從插件作者的角度來看,它可能是不能接受的,從許多Blogger的角度來看,誰願意贊助,為高品質的插件和軟件,以維持高標準,在其博客。
> Well, I don’t want money for my plug-in (see my blog for instance, not adverts here!) because it’s not a commercial one. >好,我不想為我的錢,外掛在(見我的博客舉例來說,沒有廣告,在這裡! ) ,因為它不是一個商業之一。 But I want that you know that I have already spent lot’s of time in my plug-in.但我想你知道我已經用了很多的時間,在我的外掛程式。
I understand your sentiments fully as I explained above.我明白你的情緒,充分正如我以上所解釋的。 However the key point is as the platform is maturing so is the need for high quality products which are well supported.但是關鍵的一點是,由於平台是成熟的,所以是需要高品質的產品,這是十分支持。 It is with this view I released my first paid plugin -這是這個看法i發表我第一次支付的插件- Translator Plugin Pro翻譯插件親 for providing translation of WordPress blogs in 14 languages.提供翻譯WordPress Blogs的14種語言。 But I digress.但我偏離。 I am not criticising the free plugin authors per se.我不是批評免費插件作者本身。 I am in the same seat as they are.我在同一個座位,因為他們。 I am simply pointing out some limitations of current anti-spam products and solutions.我只是指出一些局限性,目前的反垃圾郵件產品和解決方案。 There is a poem by poet and nobel laureate, Rabindranath Tagore, which roughly translated in English is:有一首詩,詩人,諾貝爾和平獎得主,泰戈爾,大致翻譯,在英語是:
“I close the doors to prevent lies from entering my mind, I then also close the door for truth”. “我關閉的門,以防止在於從進入我心目中,我當時也關門,為真理” 。 Replace lies with spams and truth with ham and you can see what I am trying to convey取代在於垃圾郵件和真理與火腿和你可以看到什麼我想傳達
Thanks for all of your insightful comments.感謝您所有的有見識的意見。
January 16th, 2007 at 9:48 am 2007年1月16日在上午09時48分
[...] « The Big Void In WordPress Comment Spam Protection Is Google AdSense Losing Its Relevance January 16th, 2007 by Angsuman Chakraborty [...] [ … … ] «大無效在WordPress評論垃圾郵件防護是Google AdSense失去其相關性2007年1月16日由日由Angsuman Chakraborty [ … … ]
January 16th, 2007 at 2:33 pm 2007年1月16日在下午2時33分
Sorry to keep this so brief, but I’m in a bit of a hurry and can elaborate on this later if you’d like.抱歉,保持這樣的簡單,但我在有點著急,可以闡述這稍後如果您想要。
I’m currently using the combined efforts of Bad Behavior and Akismet and experience, on average, one false negative per month.我目前使用的聯合努力,不良行為和akismet和經驗,平均來說,一個假陰性每月。 I also block the IPs of repeat offenders (more than five spam comments submitted per day) for a maximum of seven days.我也座的IP是屢犯者(五年以上的垃圾郵件提交的評論每天)為最多七天。
Judging by your experience with Bad Behavior, I strongly recommend that you try the most recent version (currently v2.0.9).從您的經驗,與不良行為,我強烈建議您嘗試的是最新版本(目前v2.0.9 ) 。 Most of the recent fixes have been geared toward dramatically lowering the amount of false positives.最近大部分修復已面向大幅降低的數額假陽性。 More information is available on Michael Hampton’s Bad Behavior blog,更多信息可在邁克爾漢普頓的不良行為博客, Lunacy Unleashed lunacy釋放 . 。
I also recommend that you try the most recent version of Akismet (currently v1.2.1).我也建議您嘗試的是最新版本的akismet (目前v1.2.1 ) 。 The current version introduced a paginated view of spam comments, which dramatically shortens load times, but I’m not sure if it paginates the moderation que, as I have never had a moderation que as large as yours.目前的版本推出了頁碼鑑於垃圾郵件的評論,這大大縮短了載入時間,但我不知道,如果它paginates溫和闕,正如我從來沒有放緩,闕大如你。
October 16th, 2007 at 5:02 am 2007年10月16日在上午05時02分
Hi Angsuman喜由Angsuman
Just wondering if you know how to force Wordpress blacklist deletion to take place *before* Akismet kicks in. That would seem to be the best thing for it to do.只是不知道,如果你知道如何強制的WordPress的黑名單中刪除,以採取地方*之前* akismet踢英寸這似乎是最好的事,它做的。
January 20th, 2008 at 3:55 am 2008年1月20日在上午03時55分
I agree about Bad Behavior…I\’ve had problems with it too and I\’ve read it sometimes blocks Google.我同意關於不良行為… …我\ '維生素E出現了問題,它也和我\ '維生素E讀它有時攔截Google 。 One time it locked me and everyone else out of my blog.一時間,鎖定我和其他所有人對我的博客。 My rankings on one blog went up as soon as I disabled it.我的排名就一博客上升盡快正如我殘疾人士。