search

pfefferle / wordpress-webmention

A Webmention plugin for WordPress
https://wordpress.org/plugins/webmention/
MIT License
115 stars 32 forks source link

Do not bypass spam detection #443

Closed pfefferle closed 7 months ago

pfefferle commented 7 months ago

In the current code, we bypass spam detection completely, because every Webmentions is always only 1 or 0.

That makes spam detection useless and with spammers keeping up with new technologies like Webmentions, we should not bother our users to check every Mention.

What do you think @dshanske

/cc @kbrown9 and @cybeardjm

pfefferle commented 7 months ago

Conversely though, no spam system so far is really equipped to make decisions on webmentions because they don't know what they are.

That's not completely true, this request came initially from the Akismet team and we are working on supporting Pings in the next version of Antispam Bee!

When we always set all Webmentions either to 1 or 0 Akismet or Antispam Bee have no chance to train their algorithms from false positives for example.

dshanske commented 7 months ago

Conversely though, no spam system so far is really equipped to make decisions on webmentions because they don't know what they are.

That's not completely true, this request came initially from the Akismet team and we are working on supporting Pings in the next version of Antispam Bee!

When we always set all Webmentions either of 1 or 0 Akismet or Antispam Bee have no chance to train their algorithms from false positives for example.

That's why I approved.

pfefferle commented 7 months ago

Ah, I only saw the red bubble 🫣

But wanted to give you the context anyway!

dshanske commented 7 months ago

Ah, I only saw the red bubble 🫣

But wanted to give you the context anyway!

Accidentally clicked the wrong response and fixed it.

cybeardjm commented 6 months ago

Hi @pfefferle - Just updated to the latest version. Now all pings (reposts, likes...) coming from Bridgy go directly to spam!

pfefferle commented 6 months ago

@cybeardjm have you added "brid.gy" to the allow-list?

@cybeardjm I will talk to the Akismet Team, to see what we can do.

kbrown9 commented 6 months ago

Hi @pfefferle! @cybeardjm did reach out to us, and I'm investigating the issue.

pfefferle commented 6 months ago

Oh even better, thanks @kbrown9

cybeardjm commented 6 months ago

@pfefferle @kbrown9 Nope, didn't modify my allow-list since our last exchange (well, I just removed my own domain, to avoid having some "comments" auto-validated).

What's strange, so far, although I updated the plugin on both blogs: on my main blog (WWW), all webmentions go to spam directly. Not on my 2nd blog (AMF), where half of them are just "pending"... This happened in the past though: not all webmentions were flagged by Akismet...