Update on SPAM Comments

I notice that the number of SPAM comments being left on my blog has reduced dramatically since I introduced the CAPTCHA test. However, the problem has not gone away completely which tends to confirm my suspicion that the attack is being launched by a semi-automated process. I think that a fully automated process would not be able to breach the CAPTCHA system, but a recent comment (which was automatically detected as SPAM) is a brilliant example of why it must be an automated system:

This blog is wonderful. You are clearly and expert in %PAGE_TITLE%. I have shared this post with all of  my colleagues ...

This could be a boost to my ego because I am proud to boast about my expertise in a wide range of subjects, but %PAGE_TITLE% is not one of the areas that I claim expertise.

Since the CAPTCHA is not being totally effective in blocking the SPAM, I will disable it. Instead I will force users to register for an account in order to leave a comment. In addition I have enabled a rule whereby comments have to be approved before becoming visible on old posts (most genuine comments are left fairly soon after the post is initially published).