Fighting Movable Type Spam

I think that I've found the answer to the stupid comment spam that's now ubiquitous throughout Movable Type installations. It's called MT-Keystrokes and it's an ingenious little program. Since most comment spam is submitted through bots that exploit the <$MTCommentScript>.cgi file, this little program ensures that only comments that are actually typed into the comment textarea get posted. All it uses is a little javascript to check that keys have been stroked before the comment is submitted. There's even a check to make sure that if a user pastes text into the comment box, that this is considered legit. And, hey, if any spammer wants to sit around and manually type in comment spam into this worthless web log — more power to him.

Knock on wood but I think this will work really well. You should check it out if you're using Movable Type and especially if you're having problems with MT-Blacklist. I think this one is actually better because it will actually deny the post which won't cause Movable Type to refresh its databases.