There are multiple ways for spammers to win. The most obvious victory for them is when they manage to get content on your board or blog. But there are other victories as well that are not quite so obvious. For example, every time a spammer takes up some of my time, they’ve won a minor victory. There are plenty of studies that can be found via google that talk about how much productive time is lost to corporations due to email spam. If I look closer to home… how much of my personal time would have been lost, had I not been able to create some systems to combat spam?
How Much Is My Time Worth?
Let me start by quantifying how much I think my time is worth, based on a couple of easy metrics. When I do work in real life my billing rate is … well, I don’t want to post it, but it’s not cheap. I don’t think I can use that billing rate as the time value for this discussion, so let me move on. When I do work for phpBB clients, I charge between $25 and $50 an hour for the work. Yes, I am more expensive than many, but the higher rate accomplishes two things. First, it makes sure that people are serious about hiring me and not wasting my time. (There’s a theme here, see?) Second, if I can’t make at least that much working for someone else, I would rather work for myself. I have dozens of projects in various degrees of completion, and I would love to have some of them move forward. Working for someone else at $10 an hour doesn’t move my own projects forward, and I would rather work for myself for “free” that work for someone else at that lower rate.
As a result, I’m going to use $35 / hour as a nice middle-of-the-road rate for the metrics for this post.
How Much Time Is Wasted?
I will start by referencing statistics from this specific blog. Regular readers will be familiar with the process used to develop the Checkbox Challenge MOD. It was first put in place to block spam comments for this blog. Before that code was in place, I did use Akismet… in fact I continue to use it today. Unfortunately prior to the Checkbox Challenge MOD I would have hundreds of comments in my Akisment queue every single day. I never wanted to lose any legitimate content, so I would have to spend time reviewing every single comment in the quarantine list.
Let me be fairly conservative and suggest that it takes 15 seconds to process each comment. That includes reviewing it, marking it, clicking various buttons, and so on. That means every comment blocked before it gets to Akismet saves me fifteen seconds of time. How much is that worth?
Quantify the Benefit
Here are the statistics from this blog since August of 2007. As shown here, there have been a substantial number of attempted comments.
+-----------+------------------+ | log_month | comment_attempts | +-----------+------------------+ | 2007-08 | 3567 | | 2007-09 | 4715 | | 2007-10 | 4643 | | 2007-11 | 8484 | | 2007-12 | 3977 | | 2008-01 | 7116 | | 2008-02 | 7979 | | 2008-03 | 9905 | | 2008-04 | 6245 | | 2008-05 | 6588 | | 2008-06 | 7480 | | 2008-07 | 9173 | | 2008-08 | 10791 | | 2008-09 | 222 | +-----------+------------------+
There was a total of 90,885 comments attempted. How many of them were successful? A quick check revealed that out of all of those attempts only 274 comments were successully processed. That means that 90,611 were blocked before they ever got to Akismet. If I had spent 15 seconds reviewing each of those, the total time comes out to 1359165 seconds. I can divide that number by 60 to get 22652.75 minutes, divide by 60 again to get 377.5 hours. Finally, I will multiply that number by $35 an hour and the Checkbox Challenge MOD has saved me $13,212.50.
Think about that for a minute.
Over thirteen thousand dollars in potential lost productivity due to spammer activity on this one blog.
Some might consider that 15 seconds per each comment might be too high, and that’s a valid point. I played around with the numbers before I chose that hourly rate. For example, if I reduce the number of seconds to process each comment by half and at the same time increase the hourly rate up to $50 the overall resulting cost is still a five-digit number. For that reason I will stick with these values for the rest of this blog post. I have posted the raw data so if someone wants to review the values using different input parameters they can certainly do so.
Total comments blocked: 90,611
Total savings: $13,212.50
Adding to the Misery
Here are some numbers from other boards or blogs where I have the same code in place. All of these numbers are based on $35 / hour and 15 seconds per spam content element, whatever it might be.
Wife’s sewing blog: blocked 625 comments
My professional blog: blocked 1589 comments
Photography blog: blocked 217 comments
Other personal blog: blocked 94 comments
Total comments blocked: 2,525
Total running savings: $13,580.00
How about web site comments? I have comment forms on two different domains and have implemented the same protection mechanism on both. Here are the numbers:
Web site comment form: blocked 11046 spam comments
Web site comment form (different domain): 251 spam comments
Total comments blocked: 11,297
Total savings: $1,648.50
Total running savings: $15,228.50
What about phpBB2 registration spammers? If they register and I have to clean them up, that’s a substantially longer process than 15 seconds. If they register and post, then that can run up the clock too. Fortunately due to my Spammer Hammer clean-up process, it’s not too bad, so I will stick with the 15 second rule for these too. Here are the numbers:
phpBB2 board #1: blocked 13,806 spam registrations
phpBB2 board #2: blocked 4,973 spam registrations
phpbb2 board #3: blocked 1,994 spam registrations
phpbb2 board #4: blocked 10,894 spam registrations
phpbb2 board #5: blocked 1,454 spam registrations
Total registrations blocked: 33,121
Total savings: $4,830
Total running savings: $20,058.50
I think I’ve made my point and will stop here.
True Cost of Spam
Do I really have $20,000 in the bank because of the few simple checkboxes that appear on my registration and comment forms? No, unfortunately I do not. If I can figure out how to do that, I would be ready to retire soon. The point I am trying to make is that spammers cost time even when they are not successfully posting content on your board or blog. That time has a definite value associated with it, and in my case it seems to be fairly substantial.
The numbers I used to quantify the cost of spam don’t include things like potential lost revenues from advertisers, lost member traffic, or even loss of page rank because of spam content. I will be honest; if I were still processing over a hundred Akismet quarantined comments every morning for this blog, it (this blog) would have died a long time ago. What is the cost of losing an entire site or service because of spam? That’s much harder to quantify.
The time I spend writing code has a cost. The time I spend writing blog posts has a cost. The time I spend reading other blogs or discussion boards has a cost. But these are all costs that I “opt in” to paying because they are things I want to do. I don’t have any desire to waste time processing spammer data, so that’s a cost that I want to manage or reduce. It seems that the time spent writing the Checkbox Challenge code has had a very nice return on the investment.