AntiSpam: Difference between revisions
Jump to navigation
Jump to search
Email
(25 intermediate revisions by 3 users not shown) | |||
Line 1: | Line 1: | ||
{{Semi-protected}} | |||
反制廣告郵件/垃圾信件/廣告評論(spam comment, trackbacks) | 反制廣告郵件/垃圾信件/廣告評論(spam comment, trackbacks) | ||
== spam of comments/trackbacks == | |||
防制廣告機器人(WWW Robots, wanderers, spiders)的方法 | |||
=== 改用第三方的留言平台(comment system) === | |||
* [http://disqus.com/ Discover your community - DISQUS]{{access | date = 2011-04-04}} | |||
* [https://developers.facebook.com/docs/reference/plugins/comments/ Comments - Facebook 開發人員] "Comments Box is a social plugin that enables user commenting on your site." Quoted from official website. | |||
** 實作範例: [http://wordpress.org/extend/plugins/facebook-comments-for-wordpress/ Facebook Comments for WordPress « WordPress Plugins] | |||
* [http://www.cocomment.com/about/integration coComment - Help/Integration] | |||
=== IP封鎖 === | |||
* [http://tools.dynamicdrive.com/userban/ .HTACCESS IP, Referrer, and Hotlink Banning Generator] via [http://jas9.blogspot.com/2007/07/htaccess.html .htaccess 生成器] for [http://httpd.apache.org/docs/1.3/howto/htaccess.html Apache web server] | |||
* [<span title="Movable Type" style="cursor:help;Border-bottom-style:dotted;Border-bottom-width:thin;">MT</span>] 避免數秒內同一IP一直張貼迴響[http://www.movabletype.org/docs/mtmanual_configuration.html#item_ThrottleSeconds ThrottleSeconds] (基本防護功能) | |||
* [[DokuWiki]]: [http://www.dokuwiki.org/plugin:ipban IP Banning Plugin] | |||
=== 權限控制(ACL) === | |||
張貼回應需經權限控制(ACL)的審核/延遲發佈 | |||
* [MT3] Login to Typekey (but not everyone has the identity of TypeKey) | |||
* [<span title="WordPress" style="cursor:help;Border-bottom-style:dotted;Border-bottom-width:thin;">WP</span>] [http://frenchfragfactory.net/ozh/archives/2005/02/02/wordpress-plugin-auto-moderate-comments/ Wordpress Plugin : Auto Moderate Comments] | |||
=== 黑名單(blacklist) === | |||
Blacklist Sources {{access | date = 2018-01-22}} | |||
* [http://meta.wikimedia.org/wiki/Spam_blacklist Spam blacklist - Meta] ([https://meta.wikimedia.org/wiki/Spam_blacklist?action=raw raw file]) via [http://www.mediawiki.org/wiki/Extension:SpamBlacklist Extension:SpamBlacklist - MediaWiki] | |||
* implement: [http://www.dokuwiki.org/blacklist DokuWiki URL blacklist] | |||
* [http://www.stopforumspam.com/ Stop Forum Spam] provides API or forum modules | |||
* [https://oddmuse.org/wiki/SpamCatching_Module Oddmuse: SpamCatching Module] | |||
expired or obsolete | |||
* ''obsolete'' [MT v2+] plugins/extensions: [http://www.jayallen.org/projects/mt-blacklist/ Blacklist]。[[MovableTypeBlackList|擊殺說明]] | |||
=== robots.txt設置搜尋引擎bot的漫遊政策 === | |||
優點:在網站根目錄新增一個[[robots.txt]]檔案,告訴搜尋引擎等使用者代理程式([[UserAgent|user agent]])不要將你的網站列在索引檔。 | |||
* Blog: [http://www.oui-blog.com/archives/2005/01/espamae_eie.php Oui-Blog │防治垃圾spam大作戰 正式開始!] 2005-01-02 建議「不再INDEX CGI網站動態網頁,只剩下靜態網頁的部分。」 | |||
User-agent: * | |||
Disallow: /path/to/mt/ | |||
* Wiki: 避免將舊版頁面列入索引範圍 (資料來源: [http://chongqed.org/prevent_spam.html chongqed.org]) | |||
缺點:不是每個代理程式都會很禮貌地遵循robots.txt的原則。 | |||
=== 迴響內容的文字過濾 === | |||
* [MT3] [http://james.seng.cc/archives/000152.html Bayesian filter for MT] 2003-10-15 | |||
* [WP] Kitten: [http://mookitty.co.uk/devblog/category/kittens-spam-words/ Kittens-spam-words] 詳見 WISWYG in Vancouver : [http://lesliecafe.minidns.net/archives/2004/09/19/29/ Spam Comment]的介紹 2004-09-19 | |||
* [bloxsom] YK Weblog: [http://alumni.csie.ncu.edu.tw/~ykhuang/weblog/blog/blog20041108.html 定期殺spam comment] 2004-10-08 | |||
=== 要求使用者輸入圖上的檢核碼(security code, CAPTCHA) === | |||
在輸入評論處, 顯示一張圖片, 要求使用者輸入圖上的檢核碼(security code, [http://en.wikipedia.org/wiki/Captcha Captcha], 驗證碼, 識別碼...),藉以判別是否為濫發廣告的機器人,但是這個方法的缺點是降低網頁的親和力([[Accessibility]]),使得有視覺障礙的網友無法發表迴響 | |||
CMS | |||
* [Drupal] [http://drupal.org/node/8404 Captcha module] | |||
Blog software | |||
* [MT] James Seng: [http://james.seng.cc/archives/000145.html Solution for comments spams] 2003-10-09 (Movable Type Plugin::[http://mt-plugins.org/archives/entry/scode.php SCode]) 詳見[http://planetoid.info/weblog/archives/000069.html 安裝說明] | |||
* [WP] WordPress | |||
** WordPress Hack: [http://dev.wp-plugins.org/wiki/AuthImage AuthImage][http://www.gudlyf.com/index.php?p=376] by Gudlyf or [http://uberdork.supertwist.net/2005/03/13/plug-it-in-plug-it-in/ SecureImage] | |||
** [http://recaptcha.net/plugins/wordpress/ reCAPTCHA WordPress Plugin] | |||
* [pLog] [http://blog.markplace.net/index.php?op=ViewArticle&articleId=189&blogId=1 Mark's Place :: 為 pLog 加上迴響驗證 (AuthImage) 的功能] 2004-12-06 | |||
* [Nucleus] [http://wakka.xiffy.nl/Captcha?v=svc Plugin: NP_Captcha] via [http://blog.acelan.idv.tw/index.php?itemid=29 AceLan's Tech Center] 2005-01-15 | |||
More software | |||
* [https://developers.google.com/recaptcha/ reCAPTCHA | Google Developers] {{access | date=2017-09-14}} | |||
* [http://recaptcha.net/ reCAPTCHA]([http://groups.google.com/group/recaptcha forum]) for CMS, Blog, [http://recaptcha.net/plugins/mediawiki/ MediaWiki] [http://recaptcha.net/resources.html ...] : Stop Spam, Read Books. | |||
** reCAPTCHA for MediaWiki based on [http://www.mediawiki.org/wiki/Extension:ConfirmEdit ConfirmEdit] | |||
** [http://blog.miniasp.com/post/2008/09/Useful-tool-reCAPTCHA-A-Free-CAPTCHA-service.aspx 介紹好用工具:reCAPTCHA (免費的 CAPTCHA 驗證服務)] | |||
* [https://www.hcaptcha.com/ hCaptcha - Stop more bots. Start protecting privacy.] | |||
反思: | |||
* zonble: [http://zonble.twbbs.org/archives/2004_11/648.php 以輸入圖片中的數字作為防治垃圾留言的問題] 2004-11-30 | |||
* W3C (2005). [http://www.w3.org/TR/turingtest/ Inaccessibility of CAPTCHA] | |||
=== Comments Post Rewriter === | |||
* [WP] [http://blog.mxchange.org/2006/08/26/wordpress-plugin-comments-post-rewriter/ WordPress Plugin - Comments Post Rewriter] 2006-08-26 | |||
* [MT] [http://flickr.tw/2006/09/movabletype_spam.html MovableType 阻擋 Spam 留言小技巧] 把留言的 Form action 給打亂甚至隱藏起來, 以達到阻擋 Spammer... 2006-09-08 | |||
=== javascript的混淆技術 === | |||
* [http://phorum.study-area.org/viewtopic.php?t=47720 酷!學園 :: 觀看文章 - 防止機器人灌水] ([http://www.ez2.us/~ricky/RobotAway/ 範例與程式下載]) | |||
** [http://www.ithome.com.tw/plog/index.php?op=ViewArticle&articleId=11099&blogId=257 Fillano's Learning Notes] | |||
=== 要求使用者回答問題 === | |||
* 文字 or 數字問題 ex: [https://dinbendon.net/ 訂便當管理系統 DinBenDon] 詢問簡單的算數問題「41 加 8 等於 ?」、[http://www.oddmuse.org/cgi-bin/oddmuse/QuestionAsker_Extension Oddmuse: QuestionAsker Extension] | |||
=== 索引延遲(Delayed Indexing) === | |||
[http://c2.com/cgi/wiki?DelayedIndexing Delayed Indexing] for [[Wiki]] | |||
* Wiki內容變動一段時間後,才會允許搜尋引擎進行索引。 ex: [[DokuWiki]]預設[http://www.dokuwiki.org/config:indexdelay 延遲索引]5日,在這段時間如果有廣告留言,Wiki社群也能進行處理。 | |||
=== 分析比對spam bot的HTTP requests === | |||
* [[DokuWiki]]: [http://www.dokuwiki.org/plugin:badbehaviour Bad Behaviour Plugin] | |||
* [http://www.bad-behavior.ioerror.us/ Bad Behavior] for forum, blog(ex: WordPress)... | |||
=== 反制TrackBack Spam === | |||
* 取消Blog的TrackBack功能,改用搜尋引擎尋找Inbound Link (或稱[[Backwards Links]])。 | |||
* [http://yblog.org/archive/index.php/6512 永遠的真田幸村: 對抗垃圾引用的3種方法] (last visited: July 9, 2006) | |||
=== 反制Refer Spam === | |||
請參考[[Exclude filter of refering sites]] | |||
=== 其他 === | |||
* [MT] mt-comments.cgi增加hidden屬性 | |||
** [http://www.blogfirefox.com/archives/2004/12/movabletypeomme.html MovableType的Comment Spam] 2004-12-26 Spammer是直接利用mt- comments.cgi来进行留言,而不是利用Blog上的个个文章的留言窗口这个特点,在mt- comments.cgi里追加hidden属性的变数,凡是不利用Bolg上的留言窗口进行留言的,就认为是Spam就可以了。... | |||
** [http://www.oui-blog.com/archives/2005/01/spamae_aeea.php Oui-Blog │防治Spam大作戰 【*極*重要公告】] 2005-01-08 | |||
** [http://weblog.burningbird.net/archives/2002/10/29/comment-spam-quick-fix Burningbird » Comment Spam Quick Fix] 2002-10-29 | |||
* [<span title="Movable Type" style="cursor:help;Border-bottom-style:dotted;Border-bottom-width:thin;">MT</span>] hacks: [http://www.nonplus.net/software/mt/AvoidingDuplicateComments.htm 防止重複迴響](Avoiding Duplicate Comments 3.01) + [http://www.nonplus.net/software/mt/RebuildEntry.htm 重建單篇](Rebuild Entry 2.0) via: [http://www.chieftain.idv.tw/archives/000103.html 酋長] | |||
* change the filename of comment.cgi 效果不佳,詳見 [http://www.azuremedia.net/tech/history/blog/000926.html 說明] (jimmytp:補上一個假的原檔名這樣才不會被發現) | |||
* [MT] 修改menu.tmpl 快速消除多筆迴響或通告 [http://wiki.planetoid.info/index.php/Delete_duplicate_comments_or_pings_of_movabletype 說明] 參考: netrunner: [http://www.oui-design.com/netrunner/archives/002148.html MT的垃圾留言对策] | |||
* [MT] [http://www.elise.com/mt/archives/000246concerning_spam.php Learning Movable Type: Concerning Spam] 2004-08-16 | |||
* [Blosxom] [http://greg.vario.us/blog/software/blosxom/antispam.html nospam plugin] 利用Javascript在迴響裡加上亂數隱藏欄位 | |||
* [MediaWiki] [http://de.wikipedia.org/wiki/Hauptseite 荷蘭語wikipedia]要求匿名訪客(IP guest)編輯內容,需先預覽,才能儲存內容。 (visited: 2007-12-20) | |||
* [http://blog.ijliao.info/archives/2006/05/30/2318/ 國生三年才開始 » 用 htaccess 擋 spam] (last visited: June 2, 2006) | |||
* [WP] [http://evenxi.com/net/archives/47 5招打走Wordpress垃圾留言 | 網絡,就是有趣!] | |||
* 使用 CloudFlare {{Acronym | acronym=CDN | def=內容傳遞網路 (Content delivery network 或 Content distribution network)}} 阻擋不同類型威脅: [https://support.cloudflare.com/hc/en-us/articles/204191238-What-are-the-types-of-Threats- What are the types of Threats? – CloudFlare Support] {{access | date = 2016-03-17}} | |||
== nofollow: 降低comment/trackback的PageRank == | == nofollow: 降低comment/trackback的PageRank == | ||
Line 19: | Line 140: | ||
[[Category:Security]] [[Category:AntiRamp]] [[Category:Blog]] | [[Category:Security]] [[Category:AntiRamp]] [[Category:Blog]] [[Category:Software]] |
Latest revision as of 09:52, 26 November 2020
反制廣告郵件/垃圾信件/廣告評論(spam comment, trackbacks)
spam of comments/trackbacks
防制廣告機器人(WWW Robots, wanderers, spiders)的方法
改用第三方的留言平台(comment system)
- Discover your community - DISQUS[Last visited: 2011-04-04]
- Comments - Facebook 開發人員 "Comments Box is a social plugin that enables user commenting on your site." Quoted from official website.
- coComment - Help/Integration
IP封鎖
- .HTACCESS IP, Referrer, and Hotlink Banning Generator via .htaccess 生成器 for Apache web server
- [MT] 避免數秒內同一IP一直張貼迴響ThrottleSeconds (基本防護功能)
- DokuWiki: IP Banning Plugin
權限控制(ACL)
張貼回應需經權限控制(ACL)的審核/延遲發佈
- [MT3] Login to Typekey (but not everyone has the identity of TypeKey)
- [WP] Wordpress Plugin : Auto Moderate Comments
黑名單(blacklist)
Blacklist Sources [Last visited: 2018-01-22]
- Spam blacklist - Meta (raw file) via Extension:SpamBlacklist - MediaWiki
- implement: DokuWiki URL blacklist
- Stop Forum Spam provides API or forum modules
- Oddmuse: SpamCatching Module
expired or obsolete
robots.txt設置搜尋引擎bot的漫遊政策
優點:在網站根目錄新增一個robots.txt檔案,告訴搜尋引擎等使用者代理程式(user agent)不要將你的網站列在索引檔。
- Blog: Oui-Blog │防治垃圾spam大作戰 正式開始! 2005-01-02 建議「不再INDEX CGI網站動態網頁,只剩下靜態網頁的部分。」
User-agent: * Disallow: /path/to/mt/
- Wiki: 避免將舊版頁面列入索引範圍 (資料來源: chongqed.org)
缺點:不是每個代理程式都會很禮貌地遵循robots.txt的原則。
迴響內容的文字過濾
- [MT3] Bayesian filter for MT 2003-10-15
- [WP] Kitten: Kittens-spam-words 詳見 WISWYG in Vancouver : Spam Comment的介紹 2004-09-19
- [bloxsom] YK Weblog: 定期殺spam comment 2004-10-08
要求使用者輸入圖上的檢核碼(security code, CAPTCHA)
在輸入評論處, 顯示一張圖片, 要求使用者輸入圖上的檢核碼(security code, Captcha, 驗證碼, 識別碼...),藉以判別是否為濫發廣告的機器人,但是這個方法的缺點是降低網頁的親和力(Accessibility),使得有視覺障礙的網友無法發表迴響
CMS
- [Drupal] Captcha module
Blog software
- [MT] James Seng: Solution for comments spams 2003-10-09 (Movable Type Plugin::SCode) 詳見安裝說明
- [WP] WordPress
- WordPress Hack: AuthImage[1] by Gudlyf or SecureImage
- reCAPTCHA WordPress Plugin
- [pLog] Mark's Place :: 為 pLog 加上迴響驗證 (AuthImage) 的功能 2004-12-06
- [Nucleus] Plugin: NP_Captcha via AceLan's Tech Center 2005-01-15
More software
- reCAPTCHA | Google Developers [Last visited: 2017-09-14]
- reCAPTCHA(forum) for CMS, Blog, MediaWiki ... : Stop Spam, Read Books.
- reCAPTCHA for MediaWiki based on ConfirmEdit
- 介紹好用工具:reCAPTCHA (免費的 CAPTCHA 驗證服務)
- hCaptcha - Stop more bots. Start protecting privacy.
反思:
- zonble: 以輸入圖片中的數字作為防治垃圾留言的問題 2004-11-30
- W3C (2005). Inaccessibility of CAPTCHA
Comments Post Rewriter
- [WP] WordPress Plugin - Comments Post Rewriter 2006-08-26
- [MT] MovableType 阻擋 Spam 留言小技巧 把留言的 Form action 給打亂甚至隱藏起來, 以達到阻擋 Spammer... 2006-09-08
javascript的混淆技術
要求使用者回答問題
- 文字 or 數字問題 ex: 訂便當管理系統 DinBenDon 詢問簡單的算數問題「41 加 8 等於 ?」、Oddmuse: QuestionAsker Extension
索引延遲(Delayed Indexing)
Delayed Indexing for Wiki
分析比對spam bot的HTTP requests
- DokuWiki: Bad Behaviour Plugin
- Bad Behavior for forum, blog(ex: WordPress)...
反制TrackBack Spam
- 取消Blog的TrackBack功能,改用搜尋引擎尋找Inbound Link (或稱Backwards Links)。
- 永遠的真田幸村: 對抗垃圾引用的3種方法 (last visited: July 9, 2006)
反制Refer Spam
請參考Exclude filter of refering sites
其他
- [MT] mt-comments.cgi增加hidden屬性
- MovableType的Comment Spam 2004-12-26 Spammer是直接利用mt- comments.cgi来进行留言,而不是利用Blog上的个个文章的留言窗口这个特点,在mt- comments.cgi里追加hidden属性的变数,凡是不利用Bolg上的留言窗口进行留言的,就认为是Spam就可以了。...
- Oui-Blog │防治Spam大作戰 【*極*重要公告】 2005-01-08
- Burningbird » Comment Spam Quick Fix 2002-10-29
- [MT] hacks: 防止重複迴響(Avoiding Duplicate Comments 3.01) + 重建單篇(Rebuild Entry 2.0) via: 酋長
- change the filename of comment.cgi 效果不佳,詳見 說明 (jimmytp:補上一個假的原檔名這樣才不會被發現)
- [MT] 修改menu.tmpl 快速消除多筆迴響或通告 說明 參考: netrunner: MT的垃圾留言对策
- [MT] Learning Movable Type: Concerning Spam 2004-08-16
- [Blosxom] nospam plugin 利用Javascript在迴響裡加上亂數隱藏欄位
- [MediaWiki] 荷蘭語wikipedia要求匿名訪客(IP guest)編輯內容,需先預覽,才能儲存內容。 (visited: 2007-12-20)
- 國生三年才開始 » 用 htaccess 擋 spam (last visited: June 2, 2006)
- 使用 CloudFlare CDN 阻擋不同類型威脅: What are the types of Threats? – CloudFlare Support [Last visited: 2016-03-17]
nofollow: 降低comment/trackback的PageRank
- Movable Type Publishing Platform: Movable Type 'nofollow' plugin 2005-01-18
- Jan's Tech Blog: nofollow協議打擊Comment Spam 2005-01-19
Anti Spam Email: 收集Email清單的機器人, 報告濫發電郵/檢舉信箱, 郵件過濾
即時通訊
- [Skype] [工具選單] 檔案 -> 設定選項 -> [隱私]分頁 -> 只有在我的聯絡人名單可以撥給我或傳訊息給我 via Skype用户:小心垃圾信息骚扰 by Zheng 2004-11-18
- [Yahoo!奇摩Messenger] 即時通偏好設定 -> 拒看名單: 不在好友名單內的帳號,全部拒看。