Backup of my experimental code for a more aggressive honeypot. (against 6.x-1.x)
This code ran in production for a couple of months, with varying results. Unfortunately, I didn't have time to analyze the (separately) recorded results, so I don't have any numbers and facts to share.
A word of caution though: Any attempt like this fundamentally means to deny any posts from visitors having JS disabled.
--
I tweaked and played with this code a lot, so it contains quite some "over-engineering" and commented out stuff right now ;)
Actually, on a second look, this is even my latest "advanced testing" variant that had the pure purpose of recording results without blocking any posts at all. (i.e., "dry-run")
Do NOT apply this patch.
| Comment | File | Size | Author |
|---|---|---|---|
| mollom.honeypot-js.0.patch | 12.37 KB | sun |
Comments
Comment #1
sunHoneypots primarily work due to dumb record + replay attacks by bot networks, so this idea won't fix.
Comment #1.0
sunUpdated issue summary.