@Teri_Kanefield@mastodon.social
Post #2643308
2026-04-24 21:28 UTC
Replies (5)
-
@paul_ipv6@infosec.exchange 2026-04-24 21:32
@Teri_Kanefield@mastodon.social we haven't gotten to the point of getting some kind of WAF or captcha yet but that seems like the most common solution.
-
@SteveBellovin@infosec.exchange 2026-04-24 21:33
@Teri_Kanefield@mastodon.social While I don't have a solution, I suspect that it's that bots now use AI to parse the web page and find that link.
-
@ewen@social.ewenbell.com 2026-04-24 21:48
@Teri_Kanefield@mastodon.social Are you using Gmail by any chance? I was drowning in spam before moving to Proton for my email, they just do a better job of flagging spam before it hits the inbox. Forms on a website can deter people from actually contacting you. A lot of folks break the email address into words as a compromise. Email me with "Ewen at ewenbell.com" for example. Everything you do to deter spammers also makes it harder for your real audience though. I'm amazed that many email providers aren't keeping up with what spam looks like though.
-
@slotos@toot.community 2026-04-25 00:33
@Teri_Kanefield@mastodon.social Bots didn’t get better. The form might’ve been invisible to the bots for a bit because there was none before. Frankly speaking, without something to make repeated use of the form expensive, there’s nothing you can do. I know of two ways to add cost: https://anubis.techaro.lol/ and captchas. You’ll need to add a hidden field to the form that contains a random short lived one time password so that bots cannot simply run direct POST requests (captchas do this by definition).
-
@goodreedAJ@sfba.social 2026-05-05 00:04
@Teri_Kanefield@mastodon.social While it wouldn't stop them from sending emails, on your server end, you could create a folder to filter all emails from "Contact Teri" to at least segregate them from other emails that you want to get on that address.