If the attacker is willing to put work into spamming this specific site, which is possible, then neither of these gets us anywhere, since you don’t need karma to give karma. To be an effective barrier, you would also need to limit voting to those with positive karma. I’d support that.
EDIT: Admins would then have to track down and delete those accounts which gave positive karma to spammers.
If the attacker is willing to put work into spamming this specific site, which is possible, then neither of these gets us anywhere, since you don’t need karma to give karma. To be an effective barrier, you would also need to limit voting to those with positive karma. I’d support that.
EDIT: Admins would then have to track down and delete those accounts which gave positive karma to spammers.
Which is far from being certain, and so worth testing in this obvious way.
Agreed.
I think it’s probably a good idea to limit voting to those with positive karma anyway, but it’s worth doing one without the other.