David H Nebinger:
So the recent forum spam attacks highlight the difficulty of blocking spam attacks.
The solution, to me, seems to be pretty simple. If liferay.com required email validation before allowing posting to the community areas (the forum, the wiki, etc.), I think that would go a long way towards blocking some of the simple spambots out there.
Without email validation, it is just too easy to create a new account and start posting to the community areas, so easy even a bot could do it.
It is well known that captchas are easy to bypass using current AI and image processing tools, so that's not a good way to validate a new account is for a user versus a bot...
It has been considered in the past, but the spam level was almost non-existent then, and the feeling was we wanted to minimize the on-ramp to the community. But it may be time to revisit this... also we are considering a for-pay spam prevention thingy. We'll get it sorted soon though! I am sick of cleaning these up
James Falkner:
David H Nebinger:So the recent forum spam attacks highlight the difficulty of blocking spam attacks.
The solution, to me, seems to be pretty simple. If liferay.com required email validation before allowing posting to the community areas (the forum, the wiki, etc.), I think that would go a long way towards blocking some of the simple spambots out there.
Without email validation, it is just too easy to create a new account and start posting to the community areas, so easy even a bot could do it.
It is well known that captchas are easy to bypass using current AI and image processing tools, so that's not a good way to validate a new account is for a user versus a bot...
It has been considered in the past, but the spam level was almost non-existent then, and the feeling was we wanted to minimize the on-ramp to the community. But it may be time to revisit this... also we are considering a for-pay spam prevention thingy. We'll get it sorted soon though! I am sick of cleaning these up
Whatever the solution is, I hope it gets integrated into the core so those of us running Liferay as an internet site can leverage the same solution...
