Posts Tagged ‘spam’

What Do You Consider Spam?

Monday, August 18th, 2008

I’ve written before about spam, especially about how I consider it to be a crime on a par with child abuse. But what what do you consider spam? Emails hawking cheap pharmaceuticals and penny stocks are obviously spam. What about a company that leaves a comment on your blog that is might be relevant to the discussion, but at the same time is obviously just hawking their product? Do you let it through with the links intact because your readers might find it informative? Or do you edit it to remove the links because you don’t want to Google to see you link to a possible spam site? Or do you just delete it? Thoughts would be appreciated.

Bebo’s Spam Policy

Tuesday, July 29th, 2008

I maintain a Bebo profile for work. Personally, I’m not a great fan of Bebo, but I can understand why it’s one of the most popular sites in the country, and when your customers are part of the Bebo generation, it’s one of those things that you have to do.

What bugs me though is the fact that over the last few weeks, there’s been a huge increase in the amount of spam being sent on the Bebo network. Being the conscientious Internet user that I am, I of course report any spam received to Bebo.

I report spam because I loath spammers with a depth that is hard to describe. They are the absolute dregs of the Internet community. They prey on the computer illiterate, easily led and the just downright terminally stupid. Spammers create such a nuisance that a lot of time and resources are lost just to dealing with the vast amount of spam generated by these scumbags. In my opinion, anyone convicted of spamming should be left on a desert island, as far away from computer access as possible, and left to fend for themselves. Being the bottom-living scum that they are, it wouldn’t surprise me if even their SOS messages became an effort to hawk dodgy pharmaceuticals, fake watches and penny shares. OK, ok, rant over, back to Bebo’s Spam Policy.

Bebo’s spam policy pisses me off just as much as any spammer would:

What is considered Spam?
Spam is a comment or posting that bears no relationship to the content to which it’s related. For example, if someone uploads a video and all the comment says is ‘Check out ma’ page’ then that is clearly Spam. Multiple postings of the same comment is also Spam.

What happens after I report Spam?
All reports of Spam will be manually reviewed. If the reviewer agrees that it is Spam then the poster will be blocked from further posts for a certain period.

How long are Spammers blocked for?
It all depends how many times they have Spammed. The first time will be just 8 hours. The second time 24 hours. The third time 3 days. The more complaints received the longer the block will be for.

I can understand that a social networking site such as Bebo has to be careful when it comes to dealing with spam – too harsh a policy and anybody with a grudge can report a user for sending spam and innocent users could end up losing their profiles.

But when Bebo say that they manually review each report before taking action, then simply blocking spammers is a cop-out. To me Bebo are saying that they recognise that a spammer is sending possible pornographic spam to young kids, (every piece of spam I’ve received over the last few weeks has been links to porn websites), but all they’ll do is slap them on the wrist and leave the spammer keep their profile. That to me is a spam policy that is bordering on the criminally negligent.

Spam like this should be removed, the sender banned, the originating IP address logged and the senders ISP notified. The ISP should then notify the user and cut their access to the Net. Now some will make the argument that the majority of spam is generated on ordinary user machines which have been unknowingly compromised and are part of a “zombie network”. To that I say, “So? They should still lose their Internet access.”

If your computer has been compromised, and you don’t know about it, then you should be kicked off the Internet until you have resolved the problem. If you’re computer is under the control of another party, then chances are they’ll probably have your credit card number, bank details and more than enough information to steal your identity. Keeping you off the Internet and preventing your computer from passing on your personal information is doing you a favour.

I’d happily sign up with any ISP that promised to do this. Start with the backbone providers and let it trickle down to the major ISP’s and from them to smaller ISP’s, and we’d eventually have a lot less spam on the Internet.

Drop In Spam Levels

Friday, February 1st, 2008

In a completely unscientific and anecdotal way, I’ve noticed that the amount of spam hitting the sites that I manage has dropped way off. I wonder of this could have anything to do with it?

More .htaccess Magic

Wednesday, January 2nd, 2008

Whilst researching ways to block trackback spam, I had a look at using .htaccess to deny access to the trackback URL for each post. Just in case you’re interested, here’s how it’s done. Add the following lines to the top of the .htaccess file in your blog directory.

 

SetEnvIfNoCase Request_URI "./trackback/" not_allowed

 

<Limit GET POST>
Deny from env=not_allowed
<\Limit>

Using .htaccess to Block Spam Bots

Tuesday, January 1st, 2008

Following on from my attempts to block trackback spam, here’s another way to block those pesky spam bots. This only works if your server uses Apache.

Because this only works on Apache, you may have already guessed that it uses the .htaccess file to prevent the spam bot from reaching your page. In order to block a spam bot, you’ll need to know the User Agent for the bot. The User Agent can be found from your web stats package. If you’re using WordPress, then you can use any of the available stats packages to find the user agents hitting your site. (I use FireStats and StatPress.)

Before you edit your .htaccess a word of warning:

 

Be very sure of what you’re doing.

 

Because .htaccess controls access to your website, you could find yourself locked out of your own website. If that happens, you’ll need to contact your hosting provider and ask them to make the changes for you.

Once you’re ready to edit your .htaccess file, open your preferred text editor and save a blank file as htaccess. Notice that there is no dot in front of the name. The reason for this is that most modern OSes will hide any file with a filename starting with a dot, and you’ll need to be able to find the file later on.

At the top of your new htaccess file type the following:

SetEnvIfNoCase User-Agent "^User Agent To Be Blocked" bad_bot

If you want to block more than one User Agent, then add the above line for each spam bot to be blocked.

Under this, you’ll need to add the following lines:

<Limit GET POST>
Order Allow,Deny
Allow from all
Deny from env=bad_bot
</Limit>

Save the changes you’ve just made, and fire up your preferred FTP program. Upload the file to the root directory of your website or blog using the ASCII file type. Once the file has been upload, use your FTP program to rename the file to .htaccess.

Check your website to ensure that you can access it, and you’re good to go!

Trackback Spam

Monday, December 31st, 2007

Over the past couple of weeks the amount of spam hitting this site has gone crazy. At the start of December, the total amount of spam comments caught by Akismet was around the 2,500 mark. That was all the spam I had received in an entire year. In the space of a couple of weeks, this jumped to nearly 8,000 spam comments.

The vast majority of this spam was in the form of trackbacks. Although Akismet was great at catching these unwanted trackbacks, it was becoming a pain checking and deleting hundreds of spam comments every day. So I’ve disabled trackbacks on this blog.

As I still wanted legitimate pingbacks to get through, it wasn’t as easy as disabling trackbacks in the Administration panel. The trick is to delete the wp-trackbacks.php file – found in the WordPress root directory. Just deleting the file though brings it’s own problem – if a legitimate reader clicks the “Trackback URI” link, then they’ll be greeted with a page of PHP errors. It doesn’t look great, and certainly doesn’t look professional.

The full solution is to delete the original wp-trackbacks.php file and create a new one with a message explaining that trackbacks have been disabled.

In order to integrate the new file into the site template, I used the <?php get_header();?> WordPress function. You can see the full effect by clicking the Trackback URI for this post.

Monster Apologises

Friday, October 5th, 2007

Looks like Michele got an apology from Monster regarding the spam he received. It wasn’t an apology from “Smithers” aka John Burns, but from James Mailley, the head of Monster.ie. As Michele makes clear on his post, he received a spam from an employee of Monster.ie and not from Monster themselves. Nice to see that’s been cleared up then.

Another Milestone Reached

Sunday, August 26th, 2007

Logging in today I was greeted with a message from Akismet that it had protected me from 2,002 spam comments. My first post was written on the 2nd November 2006. That means that in the 298 days since I started this blog I have received an average of about 7 spam comments a day. But that’s nothing compared to the average of 60 spam comments a day that the Limerick Blogger has received. So to all you bloggers out there, how many spam comments have you had to deal with since you started blogging?

Blog Spam

Thursday, December 28th, 2006

Over the last few days I’ve started to get some spam comments directed towards this site.

Luckily, I had set up this site to require users to be registered to leave a comment, and for all comments to be moderated before they were posted.

I have slightly updated this to require all users to be registered and logged in before they can comment. All comments will still be moderated before I allow them on the site. For anyone that wishes to post a comment, (not that many I admit), this will slow down the process, but it will ensure that no spam is posted.