Home
Documentation
Motivation
System Overview
Configuration
Publications
Downloads
Examples
Easy link
Moderate link
Hard link
Spam-resistant Guestbook

kaPoW Guestbook

This guestbook is protected using kaPoW's client puzzles. Before posting a comment, the guestbook runs the content of the post through SpamAssassin to determine its spamminess. Based on the score, a kaPoW puzzle is attached to the submission form that the client must solve in order to post the message. The more spammy the comment is, the harder the puzzle is. The guestbook also queries DNSBLs (DNS block lists) to deliver harder kaPoW puzzles to IP addresses that are known to be bad.

7
November 02, 2009 - 14:04 PM
hillbilly joe
Buy this viagra now!
6
April 20, 2009 - 09:04 AM
Wu-chang Feng
Right now, the guestbook protection is tied tightly to the performance of SpamAssassin. We're exploring other mechanisms that might improve the algorithm for selecting difficulty. Thanks for the feedback
5
April 19, 2009 - 01:54 AM
anon
This is a really interesting method for combatting the spam problem, though I wonder how effective it really is. For one thing, can't an automated attack simply run their comments through SpamAssassin themselves and then modify the message until they receive a lower score? After having done so for a few hundred messages, a well-programmed script could probably devise an algorithm for maximising the amount of spam that can be delivered in an interval of time (keeping in mind I know little of how SpamAssassin works, so it could be more resistant to this kind of attack than I think).
Adding this paragraph, including the words "[words removed due to inordinate length of time required to post comment]" to the post increases the number of units of work from 0 to 18412927881, which is hardly fair, as it doesn't allow someone to give an example of spammy text when talking about spam.
The phrase I removed included "viagra" and "sex" as well as mentioning enlargement of certain body parts, in ALL CAPS.
4
April 15, 2009 - 15:44 PM
Alfonso
Sweet! I tried posting a spammy comment and had to cancel it. Good spam will still bypass this since SpamAssassin is not foolproof
3
April 09, 2009 - 01:52 AM
spammy comment
This is a joke :)
Discovered that something was wrong. For fifteen possibilities
floated his mind. It might have face whose cold loveliness
he had once kissed, was too early for rafael to settle himself
here: in england, appear to bear witness to the prevalence.
2
April 09, 2009 - 01:46 AM
lightspeed
So exactly why is this hard for spammers?
They just need a javascript emulator to get past.
With fast JS engines like V8 this is piece of cake.
1
November 10, 2008 - 14:16 PM
Wu-chang Feng
kaPoW's guestbook is up and running
Page 1