[Koha] wiki spam protection

[Jared Jennings]

i just read on the ruby-talk list (about the Ruby programming
language) that they have a wiki 'tarpit' that spammers get routed to.
it looks like the real wiki, and it's all they can see, so when they
change it it's changed. they think they've spammed the wiki, and
leave.

it seems the ruby wiki has had other spam protection methods in the
past, and since spammers could see they were being circumvented, they
tried a lot of things to go around the protection.

so if you visit their wiki, and your IP address doesn't reverse-lookup
(i.e. there's no name for your ip address), and you haven't set any
user preferences, you are judged to be a spammer and routed to the
'tarpit', the fake wiki. (of course they have a list of known
non-spammers, and a list of spammers for which the above predicates
aren't true.)

the wiki maintainer then has to look occasionally for innocent users
who've been accidentally routed to the tarpit, and 'rescue' them. but
he said that in 46 updates to the tarpit (and 93 to the real wiki),
only three updates had been innocent users updating the tarpit.

i thought you all might be interested, what with the recent koha wiki
spam problems. what's our spam like, anyway? am i right to assume it's
mostly automatic spam, since the clearly readable username/password
authentication is keeping it out?