MT-Blacklist/Comment Spam Clearinghouse: The Collective Deep Breath

Grok Headline matches for MT-Blacklist/Comment Spam Clearinghouse: The Collective Deep Breath

MT-Blacklist/Comment Spam Clearinghouse:
MT-Blacklist: MT Plugin Developers
Contest Grand prize

MT-Blacklist/Comment Spam Clearinghouse:
MT-Blacklist: MT Plugin Developers
Contest Grand prize 07/23/2004 08:00 PM
Jay Allen's MT-Blacklist for MT3 wins the Movable Type Developers Contest grand prize .. Here’s his reaction

jayallen.org/comment_spam/2004/07/mtblacklist_mt_plugin_dev elopers_contest_grand_prize
track this site | 3 links

MT-Blacklist/Comment Spam Clearinghouse:
MT-Blacklist v2.0e released

MT-Blacklist/Comment Spam Clearinghouse:
MT-Blacklist v2.0e released 08/17/2004 06:02 AM
MT-Blacklist 2.0e is released

jayallen.org/comment_spam/2004/08/mtblacklist_v20e_released
track this site | 3 links

"MT-Blacklist/Comment Spam
Clearinghouse"

"MT-Blacklist/Comment Spam
Clearinghouse" 11/10/2003 11:14 PM

MT-Blacklist/Comment Spam Clearinghouse

MT-Blacklist/Comment Spam Clearinghouse 11/11/2003 07:06 AM
The MT-Blacklist/Comment Spam Clearinghouse .. Jay Allen's MT-Blacklist

jayallen.org/comment_spam
track this site | 6 links

MT-Blacklist/Comment Spam Clearinghouse:
Six Apart quells the fury

MT-Blacklist/Comment Spam Clearinghouse:
Six Apart quells the fury 05/16/2004 12:42 AM
“Six Apart quells the fury” .. has a good analysis of the announecment .. relevent

jayallen.org/comment_spam/2004/05/six_apart_quells_the_fury
track this site | 5 links

The Collective Deep Breath

The Collective Deep Breath 05/14/2004 09:09 PM
jay has a rather interesting perspective

Thought for the day:Take a deep breath

Thought for the day:Take a deep breath 08/15/2004 09:21 PM
Computer Weekly Aug 16 2004 1:07AM GMT

Time to stand back, take a deep breath

Time to stand back, take a deep breath 08/11/2004 06:22 AM
SiliconValley.com Aug 11 2004 11:01AM GMT

Lawsuit Against Spam Blacklist Heading
To Court

Lawsuit Against Spam Blacklist Heading
To Court 09/07/2004 03:08 AM
We've written plenty of times in the past about how various spam blacklists are causing all sorts of problems by putting sites on their list (including Techdirt) that obvious ly haven't been spamming. However, as bad as being blacklisted is (and we keep getting blacklisted by Outblaze for no clear reason) should someone be able to sue for it? As far as I'm concerned, it's the problem of whoever decided to set up such an obviously bad spam filter and then rely on it to completely block, without review, all messages that were checked off as spam. However, others take it a step further and have decided to sue blacklists that wrongfully (probably) list them. The latest such case is about to go to court, according to an article in Salon.com. Again, it sounds like the guy suing is overreacting by blaming the guy who set up the list -- no matter how bad the list was. The problem is with those who relied on such a questionable list, and not the list maintainer. As the article notes, however, it looks like ISPs and companies are finally starting to realize that not all spam blacklists were created equal, and not all are worth using.

MT-Blacklist - A Movable Type Anti-spam
Plugin

MT-Blacklist - A Movable Type Anti-spam
Plugin 10/29/2003 03:28 AM
MT Blacklist (blog antispam download) .. MT-Blacklist Looks Very Promising .. the MovableType Black List .. hey, tip the guy will ya?! .. eigene Projektpage .. zap comment spam

jayallen.org/projects/mt-blacklist
track this site | 6 links

China sets deadline to end junk mail
with blacklist of 656 spam servers (AFP)

China sets deadline to end junk mail
with blacklist of 656 spam servers (AFP) 02/19/2004 06:16 AM
AFP - China's Internet police has published a blacklist of 656 spam servers across the world, setting a deadline for them to stop sending junk mail, state media reported.

MT Comment Spam

MT Comment Spam 01/16/2004 11:05 AM
So let's say you run a reasonably popular weblog that's open to comments from anyone and everyone. Let's also say in the same breath that you don't necessarily believe that turning off comments on older entries is a good...

Comment Spam Changes

Comment Spam Changes 03/06/2004 02:03 AM
After giving up on the fight against Comment Spam on my blog, I have resorted to opening up comments on my most recent entries, and monitoring them for spam, and closing comments after they have had plenty of time to...

Comment Spam

Comment Spam 10/28/2003 11:06 PM

Now that I am back home and rested, it is time to share an amusing story... as Randy noticed, I got some comment spam on Monday, all referencing an online gambling site.

32 comments in the course of 65 minutes.  The last 9 of which were not seen by anybody as I had blocked the ip address by then.

65 minutes to create.  Carefully crafted to appear to be on topic.  10 seconds to wipe out.

No more comment spam

No more comment spam 02/01/2005 09:33 PM
I've been waiting forever for someone tp pick up doing a particular project to fight comment spam. A couple of days ago I got tired of waiting and put it together in an evening. It's no silver bullet, but it did cut the amount of comment spam I get down to a fraction of what it was before. And it should scale in a way so the spammers can't easily program their way around it if many people start using...

MT Comment Spam Fix

MT Comment Spam Fix 06/22/2004 12:20 PM

After the spam problem of a few weeks ago, I took a single step that Adam Kalsey talked about a long time ago that has fairly well fixed my spam problem: I renamed the Movable Type comments script. I have had exactly one spam in the last three weeks.

Spam bots, it seems, are designed to go after the default script name. You can rename the script (view the source sometime to see what I called it) and change the value in the mt.cfg file. I'm sure my log file is full of 404 requests to mt-comments.cgi.

It doesn't seem that spam bots are parsing the comment forms to find the name of the target script. It's probably just a matter of time.

Click here to comment on this entry

"comment spam"

"comment spam" 07/05/2004 09:37 AM

Comment spam again

Comment spam again 10/29/2003 01:15 AM
I was recently hit by a mass comment spammer, leaving 21 comments on old entries in my blog, and so...

Comment Spam (Again)

Comment Spam (Again) 12/19/2004 02:58 PM
To continue my own post about running MT-Blacklist: Comment spams blocked: 2735 Comment spams moderated: 238 Duplicates blocked: 1 Blacklist...

Comment spam

Comment spam 12/09/2003 05:05 PM
I started to come under comment spam fire again today. It didn’t last long. (It could be that they’re just taking a break.)

What happens to people that they grow up to be so unethical? Just wondering.

Solving comment spam

Solving comment spam 01/27/2004 10:57 PM

There are two main schools of thought concerning comment spam: the optimists and the defeatists. Optimists believe that comment spam can be beaten with technology; defeatists (maybe I should call them pessimists) believe that comments are as doomed as email and we're all going to hell in a hand basket.

The story so far

I fall squarely in to the techno-optimist category. Back in September I started blacklisting domains linked to from spam comments, defending against return visits from spammers and allowing others to syndicate my block list to run on their own site. Then in October I tweaked my comment system to eliminate PageRank from links in comments, making spamming for search engine optimisation a futile exercise. Of course, this measure only works if spammers realise it's there (I know at least one has) which is why I'm personally very happy to see that the latest release of Moveable Type has adopted the technique - to mixed reviews from the MT community.

There have been a whole bunch of other technological innovations over the past few months. Sam Ruby has implemented throttling to ban people who post three consecutive comments, and has some great ideas about guarding against strangers. Jay Allen's MT-Blacklist makes the blacklisting concept available to a wide audience. Meanwhile, James Seng's MT-Bayesian introduces trainable spam filters adapted from the fight against email spam.

The challenges ahead

So those are the solutions so far; the critical question is whether they work. The amount of spam I've been getting has definitely decreased, but as I run a completely custom blogging system I'm safe from the automated scripts that target more widespread systems - other sites make easier targets. Now that the less ethical search engine optimisers have started to catch on to the potential of comment spam to improve their PageRank the amount of spam can only increase. Some bloggers have already started to disable comments entirely (thankfully Dan turned them back on again shortly afterwards), setting a worrying precedent for the elimination two way interactions comments allow between bloggers and non-bloggers.

I'll put it in writing now: I will never disable comments on this blog. In the past few months the comments here have proved far more interesting and valuable than my actual posts, and I really appreciate the quality of the discussions that have arisen here. I will take whatever steps are necessary to keep this a useful environment for discussion.

Many people have hailed user registration as the ultimate solution to spam. It isn't, because the value of PageRank is just too high - and writing a script to automatically create accounts (even with email confirmation required) is child's play to anyone who is competent in an internet-aware scripting language. Even accessibility-impeding captchas are no defence against spammers who can afford to employ cheap labour to defeat them - and with search engine rankings as critical as they are there's no shortage of spam dollars.

With those ruled out, let's look at the remaining solutions:

The killer

Without links, comment spam has no purpose. To eliminate spam, eliminate links. Redirecting them through a PageRank killer already achieves this, but proves too subtle for spammers intent on spreading their links as widely as they can. Too truly eliminate spam, strip out links and anything that even looks like a URL and force the spammer to preview their carefully crafted advertisement before hitting submit. Seeing as hyperlinks are the single most important feature of the web this may seem draconian - and indeed it is. But on a site that serves more as a discussion forum than a farm and where the alternative to killing links is killing comments entirely this could be the saving factor.

For most blogs however links are an essential part of the discourse - I certainly wouldn't want to disable them here. Now only do they add huge value to the discussions, but more importantly they act as a "signature" for many commenters - knowing a comment is by "Dan" is far less useful than knowing that it's by Dan from www.simplebits.com.

Finding a compromise

Draconian measures such as the above wouldn't be necessary if spammers would wise up to the fact that their carefully crafted missives were having no effect on their precious PageRank. The real challenge then is to make anti-PageRank measures obvious to even the most brain-addled viagra peddlers. I've taken the first step towards this by turning on compulsory previewing for comments, which should have the added benefit of reminding legitimate commenters to use paragraph tags. I'll be working on ways of making the anti PageRank measures more obvious over the next few days, as and when work permits.

I've seen people argue that depriving legitimate commenters of PageRank is a poor compromise. I disagree: if the only cost of eliminating the incentive to spam is the loss of some Google ego then I see it as a price well worth paying. Of course, I say that as someone who's already built up their Google ego but at the end of the day it's my blog, my rules. One solution I've considered is creating a whitelist of sites that frequent commenters use in their signatures, causing them to be displayed without a redirect.

Comment spam is a solvable problem. Furthermore, blogging about comment spamming is almost as dull as blogging about blogging. Let's hurry up and solve it so we can go back to blogging about cats.

United against comment spam

United against comment spam 02/01/2005 08:43 PM

This is already being blogged all over the place, but I have to shout about it, too: several major search and blogging organizations (including Google, Yahoo! and Six Apart) have agreed upon a simple method to significantly reduce comment spam.

Comment spam update

Comment spam update 12/17/2004 06:44 PM
I've taken additional steps to prevent comment spam which will no longer affect normal site operation, so full posting features are once again avaialable.

[[ Visit http://www.macmegasite.com for full article ]]

comment spam eliminated?

comment spam eliminated? 05/29/2004 07:36 PM
Vive Le Canada,Canada-1 hour ago ... If you're interested, these comment spammers are trying to improve their ranking in google by dropping thousands of links to their shady websites all over the ...

New comment spam technique

New comment spam technique 07/30/2004 01:38 AM

The arms race against comment spammers has been stepped up a notch. I received a flurry of spam that linked to entries on other blogs. Curious to see what that was all about, I clicked on one of the links, fully expecting to be redirected to porn or an online casino. I was surprised to see a discussion of patent law; this comment spam linked to a legitimate site.

The comment that I received was certainly spam — other than the odd link, it was the typical formula: the name was “online casinos,” fake generic email address, and a vapid comment. Certainly a Stanford law professor hadn’t actually sent the spam. There was another reason this spammer was promoting someone else’s blog entry.The blog entry in question was full of comment spam. In the last 3 months, this entry had accumulated thousands of spam links in the comments.

It appears the spammers have a new tactic in increasing their PageRank. They find a site that doesn’t delete comment spam and fill it with links. Then they boost the PR of that site by spamming it in blog comments. Once the spam-friendly’s site has in increased Google ranking, all those spammed links in their comments will get a boost in rank as well.

It’s rather clever, actually.

I’m leaving out a link to the spam-ridden blog entry on purpose. I don’t want to give the spammers the link they want. If you want to see the page in question, find Elizabeth Rader’s March 1, 2004 entry called “All rights reserved in Birth Control for Flatworms” on cyberlaw.stanford.edu.

If you are a site that is apathetic toward link spam, it is now time to choose a side. If you continue your apathy and allow comment spam links to linger on your site you are helping the spammers. Spam friendly sites will now be placed on the list of blacklisted domains that are not allowed to post comments on this site.

In the war on spam if you are not for us; if you choose to look the other way and allow spammers to use your site; if you feel that keeping your site free from spam is too much trouble — you are against us.

new trends in comment spam

new trends in comment spam 08/02/2004 05:25 PM
kalsey has some good info as well. the hard part is getting people to upgrade.

Comment Spam Attack

Comment Spam Attack 02/05/2005 09:12 PM

So, apparently I'm not the only one that was hit by some bleepity-bleep-bleep spammer trying to post 400+ comment spams to my blogs. MT-B blocked about 300 of them, moderated 80, and let 4 through. That's pretty decent. The other 80 all had the same base domain so future attacks will fail for that one domain. There are also regular expressions in place now that should moderate the more ... interesting ones.

Your comments may get moderated if you include any terms relating to animal sex or incest. If so, I'll notice when I check my mail next and approve/reject it, so don't worry. A little delay is all. Keep those illegal-in-Alabama discussions going! Woo!

That said, I'm wondering if going TypeKey-only is the way to go. Yes, it makes you make an account (boo-hoo) but it keeps things a little more sane on the management end. If I get two more of these full-on assaults I'll do it, but not until then. It will alienate the more lazy amongst you.

Comment Spam Flood

Comment Spam Flood 01/16/2004 11:33 AM
I just got 500+ comment spams (mainly for zoo sex, apparently) from someone who changes IP addresses every 3 msgs and changes the offensive link in every message. This defeats the MT Blacklist program I've been relying on. Help! I don't have time to manually strip out 500 spams. I will have to close comments (if I can figure out how to do so for all previous entries)....

Comment and Trackback Spam

Comment and Trackback Spam 03/14/2005 05:05 PM
Comment spam has increased to the point where I've reluctantly had to disable allowing unregistered readers to post comments for submission. I'm spending too much time cleaning it up as well as trackback spam. I am also disabling trackbacks. This is a shame as it undermines the connectivity that...

Fighting comment spam

Fighting comment spam 02/01/2005 08:40 PM
Jay Allen has written a very nice document on how to fight comment spam Jay Allen should know a thing or two about comment spam. Before joing Six Apart he wrote the now famous MT-Blacklist plugin for Movable Type. If...

Nigerian Scam as comment spam

Nigerian Scam as comment spam 02/01/2005 08:40 PM
Nigeria scammers using comment spamming to fish for fools is certanly a new and "novel" approach. Hopefully anyone reading this post will understand exactly what kind of a scam this is.

Six Apart Guide to Combatting Comment
Spam

Six Apart Guide to Combatting Comment
Spam 01/05/2005 11:33 AM
Six Apart Guide to Combatting Comment Spam

sixapart.com/pronet/comment_spam.html
track this site | 4 links

Step one in comment spam fighting

Step one in comment spam fighting 11/14/2003 10:54 PM
One of the drawbacks to rolling your own weblog software is that any time you want to add a feature you have to do it yourself.

For instance, I’ve wished a few times that I could use Jay Allen’s MT-Blacklist plugin. It would make it easier to fight comment spam.

(I have very good reasons for sticking with my own weblog software. I’m not going to change; please don’t suggest it.)

However, my software has a feature that would be cool to see in other weblog software, so I wanted to mention it: there’s an RSS feed that shows the last n comments, no matter which post they’re in reply to.

This means that no comment spam appears, even in very old posts, that I don’t see. I still have to go to the trouble of deleting it—but it’s much better than not knowing about it.

It may be that some other weblog software packages already have this feature. If so—cool. If yours doesn’t have this feature, you might want to consider it. I totally rely on it myself (and not just for fighting comment spam).

You might say—well, my weblog software does email notifications of comments, so an RSS feed of recent comments isn’t needed.

And I’d reply—well, my software has email notifications too. I found that I hardly ever looked at them. In amongst all the other email noise, comments notifications don’t work that well.

But an RSS feed for recent comments works wonderfully.

MT 2.66 is released, some comment spam
fixes

MT 2.66 is released, some comment spam
fixes 01/16/2004 11:26 AM
apparently, the biz dev guy's suggestion of going with version number 2.666 just gets ignored around here

The Comment Spam Arms Race

The Comment Spam Arms Race 09/15/2004 03:32 AM

Mark Glaser (Online Journalism Review): Bloggers Declare War on Comment Spam, but Can They Win? Spammers find a way to game Google search results by posting links in comments sections of popular blogs. Now the makers of Movable Type and bloggers are banding together to try to keep real-time interactivity alive in the blogosphere.

Guide for Fighting Comment Spam

Guide for Fighting Comment Spam 01/04/2005 08:15 PM
Call it a late holiday gift or a great way to start the new year. In either case, we are...

Devilishly clever comment spam

Devilishly clever comment spam 02/10/2004 02:56 AM
Go to pystl dot org. Looks like your standard open source Wiki, in this case for the Python St. Louis user group, doesn't it? If someone left a comment with that as the url, it would seem pretty innocuous, even if the comment was a little random and unfocused, wouldn't it? But check out the links at the top of the page. All for commercial products that have nothing to do with Python. One almost has to respect the artistry of the scam and the degree to which they have studied bloggers, and know our prejudices. It is amazing the lengths that people will go to get a few links to their site. I guess somebody must buy their trash. I said almost respect them. It is still comment spam, so into the trash bin it goes. But the spammers get points for effort on this one....

Dynamically Typed: More on Comment Spam

Dynamically Typed: More on Comment Spam 12/29/2004 09:43 AM
With a bit more on the "automated comment spam" front, Harry Fuecks has a new post - Comment Spam Compiled and Interpreted - that might help to clear a few things up.

Comment spam and its social equivalent

Comment spam and its social equivalent 01/18/2004 09:21 PM

Now that I'm awake from the hotel spam. I guess I should channel my annoyance into at least one more blog entry.

Comment spam is becoming more "sophisticated". Originally, my policy was to erase stuff that linked to commercial sites if they didn't add to the dialog in the comments. Now comment spammers are actually trying to contribute to the discussion, but still leaving links to their commercial sites. It is much harder to identify as spam. Only by looking at the site that is linked do you realize that its probably spam.

This is sort of the social equivalent to hanging out at someone's party and handing out flyers for penis enlargers at the end of the party.

The problem is, I've always had people who post on my blog partially to promote themselves and their own sites. There are some borderline sites that the spammers are promoting that don't have to do with pharma, sex or gambling. So where do we draw the line?

The new version 2.661 of Movable Type has a feature that allows you to throttle the number of comments from a single IP address over a certain (configurable) time period. It also causes a redirect before linking to the web page of a commenter. (Prevents google juice from being transfered to commenter.) These features are like banning flyers at parties or only allowing a person participate in one discussion at a time at a party. I think this will help, but the question turns into a question that we are faced with in real life. What do we do about people who are blatantly self-promoting in a context where you are allowing anyone to speak freely?

Grok Description matches for MT-Blacklist/Comment Spam Clearinghouse: The Collective Deep Breath
GrokA matches for MT-Blacklist/Comment Spam Clearinghouse: The Collective Deep Breath

WebsiteOnThePhone.com (a business
division of Sri IIST Inc, TX) announces
the launch of Rental Management System
(RMS) - an easy-to-use off-the-shelf
software for starting an own online
video rental business.

WebsiteOnThePhone.com (a business
division of Sri IIST Inc, TX) announces
the launch of Rental Management System
(RMS) - an easy-to-use off-the-shelf
software for starting an own online
video rental business. 09/19/2004 02:24 AM
The RMS web application software allows complete automation of account creation, inventory management, tracking of rentals, customer management, rewards programs and more for the online video rental business. The online video rental store will have the capability to process payments using all major credit card processing vendors such as Card Services International, WorldPay, Authorize.net, Verisign, 2Checkout.com, Paypal, etc. [PRWEB Sep 19, 2004]

Siebel jumps into software rental market

Siebel jumps into software rental market 05/25/2004 04:13 PM

Malaysia cracks down on software piracy
amid fear of WTO blacklist (AFP)

Malaysia cracks down on software piracy
amid fear of WTO blacklist (AFP) 05/25/2004 01:08 PM
AFP - Malaysia launched a nationwide crackdown on companies using illegal or unlicensed software amid fears growing piracy could lead the country to be blacklisted by the World Trade Organization.

MT-Blacklist

MT-Blacklist 08/10/2004 04:26 PM

MT-Blacklist - A Movable Type Anti-spam Plugin: Well, a new salvo in the war against comment spam has been launched. The idiot hawking tramadol has forced me to install MT-Blacklist. He was coming in about 10 times a day from different IP addresses, so I couldn't ban him. He seems to be locked out pretty securely now.

Great plugin. Required a little hacking to get it to work, but I'm happy. It has a great "de-spam" feature that lets you retroactively examine every past comment AND trackback for banned content. It found seven comment spams that I missed in my daily grooming, then deleted them, and rebuilt the pages. Very slick.

Click here to comment on this entry

No more blacklist.txt

No more blacklist.txt 12/19/2004 03:14 PM
Recently, I’ve noticed some very strange searches coming to this site, most looking for porn, something I don’t keep at...

MT-Blacklist bug

MT-Blacklist bug 12/19/2004 03:32 PM
Today I got this error message when killing yet another spam in my blog: "Could not save your blacklist data: Got a packet bigger than 'max_allowed_packet'" Pretty interesting error message. It didn't immediately dawn on me that this was a...

"Getting the most out of MT-Blacklist"

"Getting the most out of MT-Blacklist" 12/28/2004 04:58 AM

mt-blacklist 2.0e released

mt-blacklist 2.0e released 08/16/2004 07:51 PM
for users of MT3.0d and 3.01d. If you haven't upgraded, wait for MT3.1 in 2 weeks.

BLAcklist Manager

BLAcklist Manager 11/14/2003 04:40 AM
Website finished

Blacklist 'BlackMal'

Blacklist 'BlackMal' 09/11/2004 02:07 AM
Abcnews.go.com - Fri Sep 10, 10:49 am GMT

"MT Blacklist plugin"

"MT Blacklist plugin" 05/20/2004 11:30 AM

more screenshots of the new MT Blacklist

more screenshots of the new MT Blacklist 08/05/2004 04:13 PM
jay's application is amazing, and these screens only show off part of what it does

sa-blacklist 2004041803

sa-blacklist 2004041803 04/19/2004 04:19 AM
A list of spammer domains for mutiple free software projects.

China's internet blacklist

China's internet blacklist 09/03/2004 09:43 PM
Telegraph Sep 4 2004 0:47AM GMT

"MT-Blacklist v2.03-beta released"

"MT-Blacklist v2.03-beta released" 12/26/2004 04:29 AM

Modified MT-Blacklist URL finder

Modified MT-Blacklist URL finder 06/02/2004 08:44 AM
I've modified the Outlook script I posted so that now it finds all (?) the urls in a selected set of messages in your inbox. This is useful if you receive dozens or hundreds of comment spams and want to paste all the offensive links into Jay Allen's mahvelous MT-Blacklist utility for MovableType. The copy-and-paste version is here. Please note the warnings listed in my original blogpost....

DNS Blacklist Packet Filter 0.4

DNS Blacklist Packet Filter 0.4 04/24/2004 02:04 AM
A netfilter DNSBL filtering client.

Americans Flock to Get on NRA Blacklist

Americans Flock to Get on NRA Blacklist 10/29/2003 05:01 PM
Getchya Blacklist on "Actor Dustin Hoffman was so dismayed to find his name missing from the NRA's shadowy 19-page list of U.S. companies, celebrities, and news organizations seen as lending support to anti-gun policies that he wrote to the powerful pro-gun lobby group begging to be included. " You can join too!!

Blog spammers and MT-Blacklist

Blog spammers and MT-Blacklist 04/09/2004 04:09 PM
I know it was mentioned to me before, but I didn't install MT-Blacklist until today. The blog spam just was...

Phishing Blacklist Thoughts

Phishing Blacklist Thoughts 04/17/2004 05:47 PM

These are some of the thoughts I had recently about phishing blacklists which is going to play a major role against phishing in the near future.

1. False reports can be submitted by phishers and pranksters.  To prevent this, anonymous reports should not be allowed.  Unfortunately, the user is not likely to be logged in when a report is made.  Solution is to queue the report until the reporting user successfully logs in.  Once the user is identified and associated with the report, filters and weights can be applied to rate the report.
   
   Queueing reports with client-software is no problem.  For server-side only, file the report under a cookie which can be claimed when the user logs in.  Unclaimed reports are removed after a time limit.
    
2. Maintenance, particularly the removal of entries, will be a big headache as domains are reused and websites are cleaned up.  Current maintainers are not equipped to handle this properly IMHO.
    
3. Companies should also be able to prevent some domain names from being reused independent of domain name registrars.  Ultimately, domain name registrars and blacklist maintainers will have to work things out.  This will likely lead to registrars taking over maintenance of blacklists and extending the service to provide 'howis', 'whatis', and 'whereis' information as well as 'whois'.
    
4. Beyond correlating reports, suspected URLs can be crawled to a) see if it is indeed a phishing site, b) warn the phisher into running and thus abandoning the phishing site, and possibly c) spoofback bogus information.

DNS Blacklist Packet Filter 0.53-rc1

DNS Blacklist Packet Filter 0.53-rc1 07/30/2004 03:00 AM
A netfilter DNSBL filtering client.

DNS Blacklist Packet Filter 0.52

DNS Blacklist Packet Filter 0.52 06/26/2004 04:00 PM
A netfilter DNSBL filtering client.

DNS Blacklist Packet Filter 0.51

DNS Blacklist Packet Filter 0.51 06/05/2004 02:40 AM
A netfilter DNSBL filtering client.

10 Days Of Running MT-Blacklist 2

10 Days Of Running MT-Blacklist 2 09/22/2004 03:07 PM
So, its been 10 days today since I installed MT-Blacklist 2.01b onto the MT 3 installation. Some statistics to prove...

Blacklist Alert Service

Blacklist Alert Service 02/18/2004 10:49 PM

A banker from downunder and a wee to the right just informed me that he can't read my blog because WebSense, used by his bank, is blocking the Docuverse domain.  I know where to go for regular checkup of my credit ratings. Where can I go to find out whether I am on blacklists and how can I get myself off them?  Is there a notification service and correction procedures for blacklists?  If not, I think there is a need for such a service so I'll help in putting one together.

U.S. blunders with keyword blacklist

U.S. blunders with keyword blacklist 05/03/2004 10:46 AM
CNET News.com's Declan McCullagh explains how a U.S. government agency supposedly fighting Internet censorship is quietly doing the same thing itself.

Rental madness

Rental madness 08/15/2004 12:01 AM

There was an ad on TV for a bridal fair just a moment ago. It occurred to me that the bride spends thousands of dollars on a dress she’ll never wear again but the groom rents his tuxedo, which is something he’ll have many chances to wear again. That seems backward to me.

Rental Car GPS Spying!

Rental Car GPS Spying! 04/06/2005 06:18 PM

My buddy and I were driving at a rate of speed in a rental car that was well above the posted limit a year or two ago. Out of the blue his cell phone rang and as he talked I noticed he started slowing down. You guessed it, the rental car agency was calling him saying he was violating his rental car agreement.

If memory serves me correctly he was charged like $300.00 extra when we turned the car in. Finally a court has stood up and say you cannot do this. If your not aware that rental car companies are doing this you have been so advised. [Techdirt< /a>]

MT-Blacklist/Comment Spam Clearinghouse: The Collective Deep Breath