Trackback Validator plugin v0.5
Here’s a slightly edited version of the message I sent to wp-hackers today:
The first public version (v0.5) of the WP Trackback Validator is now available from the following URL:
http://idli.cs.rice.edu/~dsandler/trackback/trackback-validator-plugin/
The idea behind the Validator, which is under development by students in the Rice University Computer Security Lab, is simple: Trackback URLs that point to pages that don’t link back to your blog are bogus. It’s an easy test to perform, and one that no current Trackback spammer is bothering to try to defeat; since we’ve started using this plugin on our personal WP blogs, our Trackback spam rate has dropped to zero.
This test is already present in some other anti-spam plugins, typically included among a hodgepodge of other content-based schemes and rules. If you’re looking for something lightweight that does one job extremely well, please check out the Validator.
The point of the project, in addition to helping to combat Trackback spam, is to collect data. We’re interested in the kinds of spams people get, from which sources, at what rate, etc. We’d like to see if, once everyone starts applying the simple reverse-link check, the spammers step up their assault. In order to help us, the Validator distribution comes with a small shell script which will send us a profile of the spam you’ve caught recently.
So, in short, to save Trackback from an untimely death, try out the Trackback Validator plugin, and send us back some data. In the meantime, enjoy spam-free Trackbacks on your WordPress site.
[...] I just saw the WordPress Trackback Validator plugin fly by my aggregator and immediately installed it. I knew Dan online back in middle school, so with this endorsement, I installed it instantly: The Computer Security Lab at Rice just released the first public version of the Trackback Validator plugin for WordPress blogs. Since I’ve been using it, I’ve had 100% classification accuracy on Trackbacks (read: every legit Trackback makes it through, not a single spam Trackback). Maybe Trackback isn’t quite so dead after all. [...]
Test my trackbacks!
Could you do me a favor? If you have a trackback capable blog, could you put a link to this page and drop me a trackback? I want to try something cool, groovy and new, and top super secret that will thrill knitters everywhere.
But to make it work, …
I’ve just activated the plugin; looking forward to ridding the dozen daily tb spams I’ve been getting.
One thing: You should add a basic readme file to the zip file. I know there’s not much to modify, but I’m a bit unclear about whether to check both Control Option boxes, one or other, or neither.
TRACKBACK VALIDATOR
It’s pretty much official: Trackback is getting spammed to death.
Around here, the only type of blogspam I get now is of the trackback variety, without exception. The traditional comment-form spam now appears to be passe, done in by all the ef…
[...] Trackback Spam Resources / Trackback Validator plugin v0.5 looks rather useful. –> [...]
Taking a hard line on TrackBack Spam.
It’s everywhere and only growing. Blogs are begining to be hammered by trackback spam as more people write automated scripts to seek out trackback uri’s and spoof them with a trackback request. Now we can start to fight back!
…
[...] Anti Trackback Liar Tool # 1 Trackback Validator plugin v0.5 The Trackback Validator plugin for WordPress performs a simple but very effective test on all Trackbacks in order to stop spam. Legitimate Trackbacks are sent by people commenting on your weblog, accompanied by a URL that points to that commentary. Spam Trackbacks are accompanied by a URL that points to a pay-per-click affiliate website or other irrelevant material. The Validator exploits this key difference: [...]
And some else, come here…
The most interest!
Well it is a nice method to check if they are linking back, but i even can use it just set a link back on my trackback spamming viagra site and remove it later
Then you have a sort of unwanted link exchange, of cause it is still better than nothing and quite a wide range of spam software doesn´t support it at the moment.