LowEndBox has been live since February 1, 2008. In those 16 years, we’ve had 6,264 posts published (including this one) with a total of 129,351 approved comments.
As far as I can determine, we did not install an anti-spam plugin until September of 2016. That was before my time working on LEB, so I don’t know if we didn’t have one before then, or if at some point the stats were reset.
I say “approved” comments because the total number of submitted comments is far larger. We get a good amount of spam, like anyone who runs a WordPress blog.
Early on, it was little more than something like this:
Great post! Really enjoyed it! BTW, you can save big on hair tonic at (some url)
Then it became more sophisticated, with an attempt to make comments that “lure you in”. For example, on our post on Copilot’s terms of service this week, we got this spam:
This is fascinating. Microsoft says Copilot is for “Entertainment Purposes Only”? Just look at the Microsoft Copilot terms of use. Wow. I wouldn’t have thought this was the case, but you lay out the evidence. Coincidentally, I was thinking about this situation also and wrote a post at (some url)
In this case, the script has lifted parts of the title (in bold), dropping sentences under a word count threshold, and then splicing it into a block of text, Madlibs-style.
Or on this one on our post about Zypher, the homemade AI companion:
I can’t believe that GitHub has announced that going forward, your data on GitHub will be used to train Microsoft’s Copilot LLM. That is not something I expected to see. I wonder what the underlying motivation is? It’s often hard to tell. Deep thinking required! Maybe AI can tell us the answer? I have a theory (linked to some url).
That bold part is lifted directly out of the Excerpt for that article.
The next frontier will be something where an AI reads the article, feeds it to an LLM, and pumps out a believable comment with a link somewhere in it. I think this is still computationally expensive for spammers. They’re obviously not going to pay Claude Opus API fees for every blog they target. Their “business model” is to hit thousands (if not millions) of blogs. But with smaller self-hosted models, they could eliminate the API cost. After all, the comment doesn’t have to be perfect. However, I think the time to download the article text, feed it to an LLM, and get the response is still 10-15 seconds per blog and that is too long.
So…what is your guess for how many spam comments we’ve received since September 2016? Make your guess and then vote to see the actual number.


















Leave a Reply