How is this different from gabs dissenter?
Show HN: Comntr – a widget that adds comments to your page
41–50 of 52 posts
Re: Show HN: Comntr – a widget that adds comments to your page
#42Earlier quoted context omitted.
It can in theory be solved, but the more important question is: will it be solved? I used a bunch of one-word-answer questions for over a decade now for sucessful spam prevention — trivial for a determined attacker with the time and resources to circumvent (and similarily trivial for me to replace with something else). This also means for a decade I didn’t ship my user data to google. Unless you are a really juicy ta…
Can you elaborate on those one word answer questions?
What fruit starts with A and is found in red yellow or green? Please answer in 5 letters
Re: Show HN: Comntr – a widget that adds comments to your page
#43Earlier quoted context omitted.
It sounds like you may not have spent any time researching anti-spam techniques. Your initial "puzzle" can be solved with 8 characters of JS: eval("23+47"). Your SVG picture can be solved using off-the-shelf OCR like Tesseract.js. Even very challenging reCAPTCHA reading tests are mostly solvable by spammers. You'd be better of using something with thousands of expert person-hours behind it, like reCAPTCHA v2.
That's right, I haven't. The puzzle will be sent as an SVG, obviously. Em.. "off-the-shelf OCR" sounds neat, but anyone who knows such words isn't an average spammer. The goal of basic SVG puzzles is to block 99% of the spammers who just type dumb comments on keyboards. The rest 1% can be taken care of by human mods. TBH, I don't like the reCAPTCHA-like solutions. They are just annoying from my personal experience an…
You said SVG twice now, but I don't see what is obvious about it.
It's an XML document that should be easier to figure out than a raster image format such as jpg or png.
Re: Show HN: Comntr – a widget that adds comments to your page
#44This sounds interesting. I've added Comntr to my extensive blog post about static site comments [1]. [1] https://darekkay.com/blog/static-site-comments/
I think, "comntr" is more like "integrated 3rd party" that can be run like a self hosted solution.
Thanks for the clarification, I've updated the description
Re: Show HN: Comntr – a widget that adds comments to your page
#45Earlier quoted context omitted.
That's right, I haven't. The puzzle will be sent as an SVG, obviously. Em.. "off-the-shelf OCR" sounds neat, but anyone who knows such words isn't an average spammer. The goal of basic SVG puzzles is to block 99% of the spammers who just type dumb comments on keyboards. The rest 1% can be taken care of by human mods. TBH, I don't like the reCAPTCHA-like solutions. They are just annoying from my personal experience an…
You said SVG twice now, but I don't see what is obvious about it. It's an XML document that should be easier to figure out than a raster image format such as jpg or png.
Won’t it have to be converted to a raster image before it can be OCRd?
Granted all you need to do is render it to a canvas but that’s an extra step on top of everything you need for a raster image, I’m not sure it’s easier.
Re: Show HN: Comntr – a widget that adds comments to your page
#46Earlier quoted context omitted.
It sounds like you may not have spent any time researching anti-spam techniques. Your initial "puzzle" can be solved with 8 characters of JS: eval("23+47"). Your SVG picture can be solved using off-the-shelf OCR like Tesseract.js. Even very challenging reCAPTCHA reading tests are mostly solvable by spammers. You'd be better of using something with thousands of expert person-hours behind it, like reCAPTCHA v2.
That's right, I haven't. The puzzle will be sent as an SVG, obviously. Em.. "off-the-shelf OCR" sounds neat, but anyone who knows such words isn't an average spammer. The goal of basic SVG puzzles is to block 99% of the spammers who just type dumb comments on keyboards. The rest 1% can be taken care of by human mods. TBH, I don't like the reCAPTCHA-like solutions. They are just annoying from my personal experience an…
It's completely dependent on the traffic of the site if a spammer takes the time to break a custom captcha.
I work on a site with 10 million monthly pageviews and spammers register on a form that has recaptcha and email verification... and we tried hidden input fields and other tricks, but each day we have consistently had 5 new spam accounts. With SVG they can just take a screenshot of what a user sees and send that to OCR. Complex math will turn away as many legitimate users as spammers.
The only real way to stop spam is to use a 3rd party API to detect it, or use something like a karma system that builds up over time. I think we're at the point where simple solutions won't work well unless you have a small site.
Re: Show HN: Comntr – a widget that adds comments to your page
#47Can i simply prefix any url with commentr.io to get to the comments section? Some time ago i did a scroing and visualization of reddit threads, maybe you find it useful, see https://migor.org/reddit/#/discussion/top?url=https:%2F%2Fww...
Yes, this is how it works:
comntr.github.io#http://foobar.com/
Re: Show HN: Comntr – a widget that adds comments to your page
#48Earlier quoted context omitted.
That's right, I haven't. The puzzle will be sent as an SVG, obviously. Em.. "off-the-shelf OCR" sounds neat, but anyone who knows such words isn't an average spammer. The goal of basic SVG puzzles is to block 99% of the spammers who just type dumb comments on keyboards. The rest 1% can be taken care of by human mods. TBH, I don't like the reCAPTCHA-like solutions. They are just annoying from my personal experience an…
It's completely dependent on the traffic of the site if a spammer takes the time to break a custom captcha. I work on a site with 10 million monthly pageviews and spammers register on a form that has recaptcha and email verification... and we tried hidden input fields and other tricks, but each day we have consistently had 5 new spam accounts. With SVG they can just take a screenshot of what a user sees and send that…
That's true when we talk about 10M monthly pageviews, but I doubt that this little extension will reach such popularity levels. If this somehow happens, by that time there will be a way to enable 3rd party captchas for any page.
Re: Show HN: Comntr – a widget that adds comments to your page
#49Earlier quoted context omitted.
That's right, I haven't. The puzzle will be sent as an SVG, obviously. Em.. "off-the-shelf OCR" sounds neat, but anyone who knows such words isn't an average spammer. The goal of basic SVG puzzles is to block 99% of the spammers who just type dumb comments on keyboards. The rest 1% can be taken care of by human mods. TBH, I don't like the reCAPTCHA-like solutions. They are just annoying from my personal experience an…
You said SVG twice now, but I don't see what is obvious about it. It's an XML document that should be easier to figure out than a raster image format such as jpg or png.
The catch is that the text will be represented as small geometric svg shapes, so the spammer will need to first render the svg to png and then run text recognition tools. But in that svg we can easily add some css animations that make sure the entire image is never rendered, so spammers will need to run the entire browser to take screenshots and will need to assemble the image from multiple frames.
Re: Show HN: Comntr – a widget that adds comments to your page
#50to just get a few comments (not quick, unmoderated discussions or in the thousands), a radical strip-down may suffice – neither server-code nor JavaScript, let alone a 3rd party: Pure atom xml rendered to html client-side via xslt in an iframe. No comment markup. Feel free to express yourself in unicode.
See e.g. at https://mro.name/blog/2009/08/nsdateformatter-http-header/