Death and Spam
The popular expression warns us that death and taxes are the only two certainties, but I'm worried we may need to add spam to the list. Publish any material that draws readership on the Web and invites reader feedback and you can be certain sure you will be swimming in spam soon enough.
One of the biggest reasons I switched to my own blogging engine was to fine tune my spam control strategy. Until today, the system was that I received an email anytime a comment was posted to this blog and it was a single keystroke to remove any offensive content. While that was as simple as I can think to make a process, the fact was that it still wasn't good enough.
The spammers ramped up their efforts until I was facing about 50 useless posts every 12 hours. While I didn't mind clearing them, the fact was that visitors were probably seeing spam due to the regularity of the postings and the time between the post and my clearing it. Obviously, there was at least spam on the blog while I slept each night.
Call me old fashioned, but I don't believe you should run into spam while reading a programming blog. I think you should be able to enjoy the on-topic content and post here in peace. I also don't believe in security systems that hassle posters, like a CAPTCHA.
Given that, I've decided to turn the tables on the spammers. All comments are now held for my approval before they are posted. While I do regret the loss of immediacy, the truth is that your comment will typically be live in a matter of hours and we don't really need anything faster than that here. If we can come to accept that small concession, we gain a perfect spam filter and neither you or I have to worry about what you will see here anymore. I feel it's worth the trade.