Archive for the ‘form spam’ Category
We often get questions asking whether FormSmarts web forms are protected against automated submissions by a CAPTCHA. A CAPTCHA is a challenge-response test used to determine whether the user is human.
Yes, we do use CAPTCHA tests, but not every time a form is submitted. Instead, the form handler decides each time whether or not to require a CAPTCHA test (and other verifications), based on unobtrusive analysis by our form spam blocker of the information submitted.
This saves time to every one, and reduces form abandonment.
Asking the user to complete a CAPTCHA test for every form submission affects form usability and accessibility.
We can’t resist publishing the story of a spammer, who yesterday ended up on a blog using
FormSmarts for their weblog comment facility.
After finding the blog on Google, the spammer confidently tried to submit an outrageously spammy message: FormSmarts form spam filter gave the comment a score of 739, where anything greater than 0 is considered to be spam. That is — and by far — the most spam-looking message we ever recorded.
FormSmarts would like to thank this spammer for this amusing moment.
A major FormSmarts upgrade was rolled out today. Changes include:
- New features in the form generator, like the ability to delete a field in a form
- A simplified user interface for generated web forms
- A major upgrade of the form spam protection engine
We plan to offer the ability to use FormSmarts as a form spam filter for third-party forms within a few months. This will effectively allow users of other form processors to benefit from FormSmarts’ form spam protection on their existing HTML forms, with very little change. Details and availability will be advertised here.
Did you ever wonder how comment spammers discovered your blog?
Crawling the Web
One possibility is that the spammer sent out a bot to crawl the web from blog to blog. This requires some infrastructure, and is becoming less effective as more bloggers use some kind of comment spam protection mechanism.
It then becomes more effective for the spammer to simply use Google,
searching for all the pages with the phrase post a comment, but without the terms sign in, register, log in, etc.
And as an additional benefit, blogs come already sorted by “importance” in the seach results.
Extending the query to restrict results to blogs not using Captchas is left as an exercise to the reader.
What This Means to You
Avoid standard phrases like post a comment on your blog. More creative phrases like Reply to this Post, share your views or letters to the editor may be safer.