The Death of Akismet (WordPress Spam Prevention Plugin)?
May 28th, 2006 by Angsuman ChakrabortyAkismet is a spam prevention plugin from the WordPress author, Matt Mullenweg. It uses collective wisdom in filtering spams. Essentially you, blog owner, help it learn by marking comments as spam. It then uses the knowledge to filter spams from other blogs and your too. There are two major problems with this approach.
First it can be tricked. It has been shown that you can mark a legitimate commentator as spam and by repeatedly doing so you ensure that all his future comments are flagged as spam automatically by Akismet. The reverse is also true. You can manipulate Akismet to mark your spam comments as legitimate comments by repeatedly (as low as 3-4 times) marking them as non-spam in blogs you control and which uses Akismet.
Secondly Akismet can be deluged with spam to make it useless.
Akismet flags several proper comments as spam (false positives). It is essential that you sometimes visit the Akismet queue and identify the proper comments and mark them as non-spam. This helps Akismet “learn”. This however fails when Akismet catches hude volume of spam comments. It becomes impossible for humans to manually visit the queue and identify false-positives. Not to mention the current incarnation of Akismet displays only 150 comments marked as spam, with no paging capability.
This weekend I received 4378 spams! How can anyone check this volume of spam? So Akismet stops learning and becomes less useful by the day. Also some poor commentators are destined to languish in the hell of being marked as comment spammers without any hope of reprieve.
In other words spammers can render Akismet useless by simply deluging the site with large volume of spams. And it works.
In the end I think Akismet alone is clearly insufficient solution as advertised. I am hesitant to use Bad Behavior again based on my last experience where it somehow prevented several people from commenting, including my friends.
WordPress comment spam is in need of a better solution.
Tags: CMS Software, Headline News, Pro Blogging, Spam Watch, Web, WordPress | | RSS 2.0 | Trackback this Article | Email this Article
Add to Technorati Favorites
May 28th, 2006 at 11:07 pm
Have you tried Spam Karma? It’s quite effective and has less false positives than Akismet. In fact, never.
May 29th, 2006 at 1:10 am
Yes
May 29th, 2006 at 4:49 pm
Akismet does make mistakes, but is very difficult to poison. It’s blocking double and triple what it was a few weeks ago with no sweat in the underlying software, so I wouldn’t count it out. (But then again, I’m biased. :))
May 29th, 2006 at 11:12 pm
Matt,
Good to see you here.
I think the core problem is the volume of spam. It pretty much prevents anyone from manually checking the Akismet queue. As a result the system, as I understand, cannot benefit from user input. As of now I have over 8000 spam (hopefully) comments in my Akismet queue. I have to hope that they are all spam as I cannot manually check them.
I do not doubt that you have made a robust system. What I am however concerned is the usefullness of the system when it doesn’t get collaborative human input helping its classification.
August 16th, 2006 at 11:52 am
Try This
http://cavemonkey50.com/code/akismet-spam-count/
October 6th, 2006 at 3:15 pm
[...] Akismet — one knock [...]
August 1st, 2007 at 5:57 pm
You are right - no way to check them all but whenever I do review the first page of spam (or crawl through the actual database) I never find false positives. Once you dig through you’ll find they are actually spam. Don’t be fooled by all the “great site, thanks” posts - their goal is to train Akismet into thinking the poster is good and then they have a better chance of getting their spam through.