Comment Moderation: Fighting Spam and Trolls

A few tips from a long-time blogger.

As any blogger with even a slightly popular blog can tell you, good comment moderation is an absolute requirement to maintain a good, readable blog.

The way I see it, comment moderation serves two purposes:

  • It prevents your blog from being an advertising platform for people who don’t contribute real content. I’m not just talking about obvious spam here, either.
  • It prevents your blog from being a platform for offensive or abusive people who don’t contribute real content. And yes, I am talking about trolls here.

Let’s take a closer look at each of these two points.

Comments by Spammers

There are two kinds of comment spam.

One type — the most prevalent — is mostly automated spam posted by software commonly referred to as spambots. Once your blog gets on the radar (so to speak), automated spam can be quite significant. This blog, for example, attracts more than 500 automated spam comments a day.

This kind of spam is pretty easy to recognize. One type, for example, includes multiple links for things like online gambling, prescription medication, or pornography. The other type puts its link in the comment form’s URL field and then fills the comment field with text that may or may not make sense but has nothing to do with the content of the original post. Here’s an example from my post titled “Five Tips for Composing a More Effective Social Networking Bio“:

I precisely had to thank you so much all over again. I am not sure the things that I could possibly have accomplished in the absence of the entire tricks contributed by you on my problem. It truly was a very frightening case for me personally, nevertheless viewing your specialized manner you handled the issue forced me to leap over delight. I’m just happy for the assistance and believe you are aware of a great job that you’re getting into training other individuals via a site. More than likely you haven’t encountered any of us.

Huh? I get hundreds of comments like this every day.

It should be noted that a lot of this spam appears on posts that may be quite old. This particular one appeared on a post that was 2-1/2 years old. This is one reason why bloggers use plugins to automatically turn off the commenting feature on older posts.

Fortunately, spam prevention tools can detect and catch 99% of this kind of spam. I use Akismet on my WordPress site and it does a great job of catching and corralling this garbage so it never has a chance to appear on my blog. If you’re not using a spam prevention tool and are manually going through this crap, what are you waiting for? Don’t you have better things to do with your time?

The other kind of spam is more insidious. It’s posted by a real person and it looks like a legitimate comment. But its sole purpose is to promote a product, service, or Web site — not to engage you or other blog readers in a conversation about the original post’s topic.

In many cases, the spammer doesn’t put any real effort into his comment. It might contain a sentence or two that’s vaguely related to the post. The spam delivery is in the commenter’s name and URL. Rather than being something like “John” or “Mary Smith,” it’ll be something like “John’s Carpet Service” or “Discount Vitamin Shack.” The URL will be the URL for the site John or Mary want to promote. In most cases, the email address will be something that’s likely fake or never checked for incoming mail — usually a Gmail or Yahoo! account — but sometimes a legitimate-looking email account is included.

To me, this is a gray area — is it a legitimate comment or spam? Considering the content and purpose of the comment should guide you. Your site’s comment policy should help; I’ll get to that in a moment.

Trolls

A far worse problem these days is what many people refer to as trolls. Trolls are people who post offensive or controversial commentary on blogs or discussion forums. Their goal is apparently to make themselves look smart or superior at the expensive of you or other commenters. By posting comments, they’re “trolling” for an argument — much like a fisherman might go trolling to catch fish.

This is where good comment moderation is vital to your blog.

You see, if you allow offensive commentary — including personal attacks on yourself or blog commenters — you do two things:

  • You discourage legitimate commenters from sharing their thoughts. After all, they could be the victim of the next troll attack.
  • You encourage more trolling activity by current and future trolls. After all, you let one offensive comment out there, you’re likely to allow others. They see your blog as a good place to troll for new victims.

Is that something you really want?

I have seen too many blogs and forums completely devastated by the comments posted by trolls and the offensive and defensive comments posted in response. Back in the early days of the Internet and newsgroups, we used to refer to this as “flame wars.” There’s nothing useful or productive about the comments by trolls or the resulting flame wars. Why allow them on your blog?

The Freedom of Speech Argument

The biggest defense against firm moderation that would prevent trolling activities is that it’s “censorship” and that you’re violating the commenter’s “freedom of speech.” They often use the phrase “First Amendment Rights.”

Let’s look briefly at the First Amendment to the U.S. Constitution:

Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances. [emphasis added]

Where exactly does it say that I have to put up with offensive commentary on my blog? All it says is that the government can’t make a law abridging the freedom of speech. I’m not the government, I’m not making a law.

So I don’t think “free speech” is a valid argument. After all, should anyone have the right to say anything they want — no matter how offensive — on your blog?

If people want to spout hate and offensive commentary, they can do it on their own blog.

Creating a Comment Policy

One way to fight back against spammers and trolls is to create and uphold a site comment policy. This policy should clearly state what is and/or isn’t allowed in the comments on your blog. Linking to this policy in an obvious place — or even placing a short version of it right above or below the comment form — will make it clear that you don’t tolerate spam or bad behavior.

Want some examples of good comment policies? Here are a few to give you ideas:

  • An Eclectic Mind. This is the comment policy for my personal blog. It’s a bit wordy — what do you expect from me? — but it does cover all the bases. You might also be interested in another post on my blog, “I Love Blog Comments Here.”
  • Stonekettle Station. Jim Wright doesn’t put up with crap either. That’s the short version of his comment policy. The long version, which address trolls and free speech, can be found here.
  • Whatever. John Scalzi’s comment policy. Simple and to-the-point.
  • Lorelle on WordPress. Lorelle knows more about WordPress blogging than I ever will. Here’s her site’s comment policy. You might also be interested in another post on her blog, “Comments on Comments.”

This topic was also addressed back in 2007 by Lorelle VanFossen in The Blog Herald.

Do you have a site comment policy you want to share with readers here? Post it in the comments for this post.

Maintaining Order

Creating a policy isn’t enough. You also have to maintain it. That means objectively reviewing every comment on your site and deleting the ones that violate the policy.

Yes, deleting them.

My advice is not to edit them, or allow them but reply with a warning, or do anything else. If a comment violates your policy, just delete it.

Don’t even send the commenter an email message telling them that you’ve deleted their message and why. If a commenter lacks the courtesy to be civil and follow your established rules on your blog, does he deserve any courtesy from you?

More important than that is the entire concept of “feeding the trolls.” When you respond in any way to a troll, you encourage more trolling activity. You see, these people just can’t let it go. They see any response as having a victim on the hook and they keep up their trolling behavior.

Ignore them and they will go away. Really.

You need to keep this in mind no matter where you see trolls. If you can’t delete their offensive crap, just ignore it. (Or, if it’s offensive enough, contact the site owner directly and tell him/her what you think and how it makes you feel about their blog/site/forum. A responsible site owner will take care of the problem.)

And if the whole concept of trolls is new to you, I urge you to read the entire “Troll (Internet)” entry on Wikipedia. It’s excellent and it clearly shows how bad these people can be for an Internet community like a blog.

Steps to Take

To sum up, I want to review the steps you might want to take to moderate and control the comments on your blog.

  1. Install and use spam prevention tools. Akismet is the best one (in my opinion) for a WordPress blog. It’s free.
  2. Write and post a site comment policy. Use the ones linked to above to give you ideas.
  3. Set up your blog to require moderation of all comments. On a WordPress blog, you do this in Discussion Settings.
  4. Regularly check for and approve (or delete) new comments. I’ve created a bookmark in my browser to quickly go to the comment moderation panel for each of my sites. I check for comments every morning and sometimes during the day so few comments are ever held in moderation for long.
  5. Resist the urge to respond to trolls on your blog. Don’t respond in comments or in email. You will regret it.
  6. Ignore the comments posted by trolls on other sites and in online forums. Don’t feed the trolls.

Please use the comments for this post to share your thoughts, experiences, and questions about this topic.

How to Create a Gravatar

A few easy steps can get your custom image on gravatar-enabled blogs.

I originally wrote this article in April 2006 when I enabled my site for Gravatars. When I revised the site a few months ago, I temporarily removed Gravatar support. I’m now re-enabling it. In the meantime, Gravatar was bought out by Automattic, makers of WordPress. It seems to me that if you have a WordPress blog or comment on them, having a Gravatar and supporting the Gravatar feature would be a good idea.

That said, I reviewed this article and updated it as necessary to provide current information. Why not create your own Gravatar and see it appear on the Web sites you participate in?

If you read a lot of blogs, you’re probably already familiar with gravatars — custom images that represent certain commenters. These images are a kind of personal logo that identifies them and says something about their personality.

Here’s how gravatars work. A commenter creates an image suitable for a gravatar and uploads it to his account on gravatar.com. The gravatar is rated using pretty much the same ratings as the movie industry: G, PG, R, and X. These ratings are used by bloggers to set limits on the kinds of gravatars that appear on their sites — a gravatar with a G rating will appear everywhere while a gravatar with an X rating may not appear on many blogs at all.

Meanwhile, a blogger (like me) sets up her blog to enable it for gravatars. Then, when a commenter submits a comment, the blog’s gravatar plugin takes the commenter’s e-mail address (submitted in the comment form) and attempts to find a match at gravatar.com. If it finds a match, it displays the corresponding image. (The e-mail address is not used anywhere in the underlying page code.) If there’s no image on file, the plugin either displays nothing or displays a default image chosen by the blogger.

If you frequently participate in blogs by leaving comments for blog posts, you should consider creating a gravatar. Its easy and its free. Here’s how.

  1. Go to gravatar.com’s Signup Page.
    Sign Up at Gravatar.com
  2. Enter your e-mail address in the box and click Signup. A message appears, telling you that an e-mail message has been sent to your account.
  3. Check your e-mail. You should find a message from Gravatar with the subject “Welcome to Gravatar.”
  4. Click the URL link in the e-mail message. Your browser opens and displays a message confirming that you have successfully activated your account.
    Enter a Password
  5. Enter a password for your account in each of the boxes that appear and click Set Password.
  6. If you want to receive a Gravatar newsletter, click the button in the next screen. Otherwise, click No Thanks.
  7. Use your favorite graphics application to create an image suitable for use as a gravatar. For best results, it should be 80×80 pixels in size and not include a border. (Keep in mind that it might be displayed at smaller sizes.)
  8. Save the image as a JPG, GIF, or PNG image with an Internet-friendly name (no spaces or weird characters).
  9. Use your Web browser to open your My Gravatars page on gravatar.com. (You may need to log in to your account.)
    Your Gravatars
  10. Click the add a new one link.
  11. In the next screen, click My computer’s hard drive.
  12. In the next screen, click the Browse button. Then use the standard dialog that appears to locate, select and open the image file you created for your gravatar. The pathname appears in the File box.
    Upload gravatar
  13. Click the Next button. The file is uploaded and appears in the rating screen.
    Rate Your Gravatar
  14. Click the appropriate button to apply a rating to the Gravatar. Don’t lie; this is important. And remember that for maximum exposure, it’s good to create a gravatar rated G or PG.
  15. Your newly created Gravatar appears in the My Gravatars screen. Click it to select it for your e-mail address. When prompted, click the Confirm button. Here’s what it might look like when you’re finished:
    Selected Gravatar

You can repeat steps 10 through 14 to add additional images. You can then change your gravatar by simply selecting one of the new images. As you’ll see your gravatar changes globally wherever it’s used when you change it.

From that point on, your gravatar should appear whenever you post a comment to a gravatar-enabled blog — like this one.

Do you have a gravatar now? Show it off by entering a brief comment on this post.

More Bad Behavior

I update some software to help keep spammers off the site — and preserve my bandwidth.

Miraz introduced me to the Bad Behavior WordPress plugin some time ago, and after ascertaining that it did indeed work with a GoDaddy.com hosting account (my hosting ISP), I installed it on all of my WordPress-based sites. What I saw was an immediate reduction in the amount of spam that Spam Karma was catching. That wasn’t because it made Spam Karma less effective; it was because less spam was actually accepted by WordPress for moderation. I can verify this by checking the Bad Behavior stats — it catches roughly 7,000 potential spam hits a week on just one of my sites. That means my server doesn’t have to work so hard and, as a result, it can be more responsive to visitors.

One of the drawbacks to hosting multiple sites on a budget is the limitations imposed by my ISP for my level of hosting. I’m allowed 100 concurrent hits — to all sites on my hosting account. I have two very busy sites online and I think they sometimes fight with each other for bandwidth. This hasn’t been a problem until lately — the other day I started getting Error 503 messages (server busy) when trying to access my sites.

I investigated and discovered that at the time I was trying to view my site, Spam Karma had caught roughly 200 spam messages in the span of 3 minutes. No wonder my site was busy. Spam Karma was fighting off spammers. But what the heck was Bad Behavior doing? Sleeping on the job?

I went to the Bad Behavior Web site and noticed an update that should resolve things. More spammer-stopping power. I downloaded and installed it. If the Error 503 messages become less common and Spam Karma catches less spam, I know it’s doing its job.

The point is this (yes, there is a point): if you have a WordPress blog that allows comments, having spam protection is more than just preventing your site from being filled up with spam comments. It’s protecting your bandwidth. And for that, Bad Behavior seems like a good solution. Just be sure that you have the latest version.

And, if you find your spam prevention software helpful, be sure to send a few euros to the developers to keep them interested in keeping the software up-to-date.

December 14 Update: I just did some more research over at Lunacy Unleashed, Web site for Michael Hampton, the developer of Bad Behavior. His article, “Spam Surge,” seems to collaborate what I’ve been experiencing. Apparently, the spam surge also affects e-mail accounts. (My e-mail spam increased considerably about a month ago but has since tapered off to manageable levels.)

Added Gravatars to Comments

Or at least I think I did.

I should get my head examined. I just added another WordPress plugin. That’s two in about two hours.

This one adds gravatars to comments. A gravatar, in case you don’t know, is a globally recognized avatar or image associated with a person. Or, in this case, a person’s e-mail address.

To get a gravatar, sign up for a free account at gravatar.com, complete the registration process for your e-mail address, and upload an 80×80 pixel JPEG or PNG image you want to appear as your gravatar. The staff at gravatar.com will rate your image so if it’s not appropriate for some sites, it won’t appear there. Then, when you enter a comment on a gravatar-enabled blog or site, your image will appear with your comment.

I say I think I set it up properly because although I installed the Gravatar plugin for WordPress and inserted the code in the comment loop, I don’t have any comments from people with gravatars. (Mine hasn’t been approved yet.) So I can’t see if it’s working.

If you have a gravatar rated R or lower and want to show it off (and help me determine whether the plugin is working), add a comment to this post.

Otherwise, I’ll just have to wait until I’m rated and see if I appear.