TOPIC: E-Mail
MICROANALYZED: SPAMBOTS
It has come to my attention that javascript will not fool all the bots. Also on the table is OCR. This has pushed my email-hiding techniques into new realms. I wanted to do it all in CSS. Find some sort of rogue way to push the text in after some sort of event; but that's javascript; That's CGI. It is also CSS2 and very promising with the before and after pseudo classes - but it's not fully browser implemented. Nothing can fill the void I have. think think think. gadZOOKS! WHY hadn't I thought of this before? ...flash. All this time, and it was right there, under my nose.
THIS is what I was trying out (and having fair success with) before flash:
1.) Call a separate fairly complex obfuscated js script (what I would call complex to a spam-bot) to a linked html file with
2.) A further obfuscation method of showing the address and mailto: on that page, and pray the %$#@! bot gets a timeout error or packet
loss or something
while following the trail (wishful thinking).
CURRENT POPULAR METHODS
The highly popular and fairly safe method is javascript. Remember now; It's good - and fun, but not foolproof.
Another method is the form. Users do not like forms for serious business correspondence. There is no way to track what was written in the simple boxes; hence the extensive line of mail-clients we have available. (I did NOT say they were all good! ;o)
Let's not forget all the munged addresses any fool could write a program to pick up the ASCII & ampersand code (a little too simple to read) and even if you dice the entire address into ASCII or even VBcode - guess what? Those stinkin' spam-heads have that technology too.
Hence my new COMPLETELY HIDDEN TO SPAM-BOTS method: Flash! But everyone cannot use that. Or should I say it is not cost effective to run out and buy a $200+ software package for such a purpose. For all you (newbie) users who have flash, here is a free sample code in my effort to help the world STOP SPAM! ( yourownNOSPAM@this-domain template 1.2MB ) It's not perfect - but it is very easy to customize.
Conclusion: Best method: CGI; I of course like my flash method best. Of course, neither is always an available option, so let us move onward.
The best you can do client-side is:
TA-DA! ...
- 1.) Place this meta in the heading: <META NAME="ROBOTS" CONTENT="NOFOLLOW">
[ref this: http://www.w3.org/Search/9605-Indexing-Workshop/ReportOutcomes/Spidering.txt] and then; - 2.) Use the CSS background-image method to show address as link (as a mouseover; REASON reference: OCR issue). Most users will then be able to write it into their e-mail address to: bar.
- 3.) Create hidden text layer link under CSS background image with words like "Place Mouse Here for E-Mail" (Some will also have images turned off so we will further need this hyperlink to...)
- 4.) Create href page to plain text version of address with an explanation how to send email to me[at]example[dot][com][org][etc] But written well. I also coded in some colors to help people figure it out! See the page I created www.robin-ann.com/em/nospam.htm for this purpose. (I'll thank december 14 for the tip later) plus you might find some other fun stuff there ;o)
- 5.) Place the flash file near the above method's (#'s 1-2-3) and lastly,
- 6.) Add a little SSI detour, Then,
And if you're really lucky and have flash (or know me and now can get your own e-mail address in flash code with its completely hidden address filing technology) you can:
VIOLA! NO SPAM SHOULD EVER COME YOUR WAY! To see it in action: look here
After much consideration and research,(about a weeks worth (14 days to be exact)...[laugh if you must since; note: I have come to realize some people dedicate their working lives to this research;]) IMO, I must conclude the best way to block e-mails from being harvested from your webs is a cgi approach; which I have yet to completely comprehend as I am mostly a client-side scripter. (Send corrections or opinions to hidden address on this page. Paypal contributions are also always welcome ;o)
RE:ROBOTS.TXT
The robots.txt file ref:(www.robotstxt.org/wc/faq.html#index) is possibly useful if 1.) You have access to upload such a file and 2.) You have names of spiders you specifically want to keep out! I personally do not think this method is worth a hoot! Unless you tell the bot where TO go; But, I then read that some bots actually can "see the bait" and "do not follow." The bots that do follow rules are probably not after you address anyway. I s'pose it couldn't hurt to have one though, just for the quasi-stupid ones. (see next paragraph)
RE:ROBOTS BEHAVIOR
After all the documents I've read, most make it sound like "most" of the spambots are pretty "stupid" and do not translate javascript. footnote: Google was the only javascript user-agent mentioned which was discussing implementation of such in my search so far, and we must stress implementation. Anyone have further evidence? Also remember the bot is only as good as its instructor. So then again maybe we want to get spam from the rare intelligent crawler (well, not really). I personally have used a method from www.hiveware.com (before I began THIS search) and since its implementation 3-4 months ago have not received any spam at that address I almost wanna say, ever! I'm looking for the deeper solution though because I believe this will not always be enough.
RE:CLIENT-SIDE SCRIPTING
see notes above, also note this meta will stop the good bots from following your links - so use it wisely.
RE:SERVER-SIDE SCRIPTING / REDIRECTION SCRIPT
I'm pretty sure BachusII's evil grin (and all else interested) can be maximized here: http://www.furinkan.net/goodies/emails.php, look to the root for free download to the php - however, they must be tweaked to only show 5 addresses per page to possibly be effective to new smarter bait-rejecting bots. (Since people have put out these bait pages, bots have "smartened up" - our pages will have to "look" more believable. Sorry, I have not yet learned how to rewrite this type of script.
And so, henceforth:
In the perfect world, where everyone uses flash to camouflage their email - some dork will come in and write a program to figure it out. But for now, we can use this method and continue to remain a step ahead. (Those who are not ahead do not have our brilliant minds and technology. Oh well. It'll trickle down in its proper rations.)
I will stick to the client-side method until(when)/unless(if) I delve server-side. (Or when someone wants to share amended code and directions :o) see wishlist
RE:WISHLIST
I'd probably go with the cgi and then a mod rewrite (for DOUBLE protection), and a little replicating fake address page, including a timeout so's not to eat up all the bandwidth when/while it gets stuck reading pages and pages and pages... (of course a place to make this option optional would be good in case bandwidth become an issue) and then I'd get much more restful sleep. It's all overkill after that. If you use everything I've mentioned, dam, do you get mail at all? Anyone wishing to share their discoveries, I'd enjoy the company. For now, back to more/other coding practices ;o)
I hope you have all enjoyed this exercise in browser searching capabilities - just remember... "The answer lies within; you must simply find a way to it." I think I wrote that. Have a supa! day :o) luv RA
RESEARCH PERIOD: OCT 12, 2004 - OCT 26,2004 , "New" developments: updated 03/31/05
http://www.stunicholls.myby.co.uk/cssforum/segment.html
Further developments: pending February 2006 Site Upgrade.

