Spammers have started breaking through the session check, so I've started filtering content for high URL density. If your legitimate message doesn't get through, toss me a line so I can recalibrate the filter.

Update: More spam. They've switched to single-line links, tagged with [url]. There's got to be a better way around this.

I've added a check for a small session cookie when commenting. We'll see how well that works.

I've been getting hit with a flurry of blog spam from a large set of IPs. Looks like some sort of botnet. I've taken down commenting until I can write some countermeasures. :-/