stargeek
PHP news website logo.
home    PHP scripts    articles    seo tools    links    search    contact    shop    realtors


Tobias Schlitt's Blog: Thoughts on Trackback Spam (Services_Trackback)







Tobias Schlitt's Blog: Thoughts on
Trackback Spam (Services_Trackback)

Tobias Schlitt's Blog: Thoughts on
Trackback Spam (Services_Trackback)
06/24/2005 03:03 PM

Tobias Schlitt has posted this new item over on his blog today with a bit more information on the PEAR Services_Trackback library and his effort to create *the* method to keep comment spam away.

A few weeks ago I announced the release of Services_Trackba ck 0.5.0, which has a new module system for integrating spam protections into your trackback mechanisms. While the most easy filter (the bad word list) worked quite well for the first time frame, but as usual it did not take long for the spammers to work around that with using entitie encoding. Of course to get around that from the anti spam point of view is very simple, too, with simply reconverting that stuff before running the bad word check. But that's not really the sense, because the spam fraction will not need long to come around this, too.

So, basically what I'm currently thinking about is, how to build a (to some degree) reliable spam protection.

He goes on, discussing some of the other options for blocking spam (blacklists, greylists, vertification of the sender) that the package doesn't support yet. He's also looking for opinions as to other methods to include in the library for the future as well...




This is a GrokNews Entry: (what is grok?)





Similar Items

Tobias Schlitt's Blog: Thoughts on Trackback Spam (Services_Trackback)

Grok Headline matches for Tobias Schlitt's Blog: Thoughts on Trackback Spam (Services_Trackback)

Tobias Schlitt's Blog: PEAR::Image_3D
Proposed


Tobias Schlitt's Blog: PEAR::Image_3D
Proposed
06/17/2005 03:32 PM
Tobias Schlitt has a new post with a proposal for inclusion into the PEAR libraries - PEAR::Image_3D.

Image_3D enables you to render 3D images using PHP. As I mentioned in my last post on that topic, the usage of PHP to render 3 dimensional images seems a bit ridiculous, but it definitly has a sense: Imagine the rendering of 3D charts from database data (we plan to implement a driver for PEAR::Image_Graph) or rendering of simple 3D images from user data. Of course one should not render those images on the fly, but cache them. Exciting is the fact, that rendering even complex 3D images (about 16.000 polygones) takes an acceptable amount of time. Try it yourself! :)

He also shares a few resources on the subject, including: the proposal, the package itself, as well as an example of it in use...

Tobias Schlitt's Blog: PHP Conference
Quebec Ending


Tobias Schlitt's Blog: PHP Conference
Quebec Ending
04/04/2005 08:18 AM
In his own quick post at the end of PHP Quebec, Tobias Schlitt, including a few great shots from the dinners and "after-conference activities".

Tobias Schlitt's Webl0g: Upcoming
Conferences


Tobias Schlitt's Webl0g: Upcoming
Conferences
09/03/2004 08:47 AM
Tobias Schlitt has a quick new posting on his weblog about some of the upcoming conferences, including the Itn'l PHP Con 2004.

Tobias Schlitt's Webl0g: PHP World
Kongress 2004


Tobias Schlitt's Webl0g: PHP World
Kongress 2004
09/23/2004 08:58 AM
On Tobias Schlitt's weblog today, he mentions the talk he's going to give at the upcoming PHP-World-Kongress.

Trackback spam


Trackback spam 01/23/2004 02:25 PM
This is odd...just before I fell asleep last night, I thought, "I wonder why no one has spammed Trackback yet. It's just so wide open, hanging out there like a breaking ball that didn't break." And then, magically, I'm surfing around this morning and ran across this report of Trackback spamming as well as a TB throttling patch for MT to help minimize the damage. If I believed in Star...

We got hit by Trackback Spam


We got hit by Trackback Spam 07/02/2004 07:42 PM

Well as soon as you lock one door they came in the back. This morning I woke up to over 100 spam trackbacks that where very nasty. Some of you may have seen them in our trackback tracker on the main page. I really love to give credit to those sites that quote us but I cannot risk having them on the main page. They are getting smarter as they are spoofing IP's so it's not like I can put in a IP block. So those of you using Movable Type Version 3 the backdoor is wide open.


Six Apart getting hit by Trackback Spam
Also


Six Apart getting hit by Trackback Spam
Also
07/05/2004 09:10 AM

Ohhh feel the love. now they get to feel the same pain a bunch of us have felt all weekend. Maybe someone now will figure out how to fix this. You know Yahoo, Google, Hotmail solved a lot of problems by making users verify they where a human by entering text that is in a obscured box. This will not fix the trackback issue but could be a option. [Six Apart]


Comment and Trackback Spam


Comment and Trackback Spam 03/14/2005 05:05 PM
Comment spam has increased to the point where I've reluctantly had to disable allowing unregistered readers to post comments for submission. I'm spending too much time cleaning it up as well as trackback spam. I am also disabling trackbacks. This is a shame as it undermines the connectivity that...

WordPress comment & trackback spam


WordPress comment & trackback spam 02/06/2005 03:07 AM
spampop

candygenius.com/spampop
track this site | 2 links


Photo Matt » Trackback Spam


Photo Matt » Trackback Spam 01/06/2005 04:46 AM
captchas are irrelevant, and you’ll just push the spammers to TrackBack spam

photomatt.net/2005/01/05/trackback-spam
track this site | 4 links


Movable Type Comment and Trackback Spam
Tools


Movable Type Comment and Trackback Spam
Tools
04/11/2005 05:50 AM

I have two tools I currently use to battle trackback and comment spam on this site, they get about 85% of it but still some nasty stuff slips through. In the next couple of says I am going to install a third tool on this site to try and fight back even more.

It's ridiculous three tools to fight trackback and comment spam. If I had any management decisions to make at SixApart this would have been a high priority. They need to quit making strategic partners and fix their tools so I don't have to spend my VALUABLE time cleaning all this disgusting stuff up.

At least some third part developers get it. It's too bad that SixApart keeps sticking their heads in the sand.[MT-DSBL]


‘Sending TrackBack pings
indiscriminately makes you a TrackBack
spammer’


‘Sending TrackBack pings
indiscriminately makes you a TrackBack
spammer’
12/29/2003 08:30 AM

blog.codefront.net/archives/2003/12/29/sending_trackback_pings_indi scriminately_makes_you_a_trackback_spammer.php
track this site | 4 links


Blog Spam, spam en webl0gs


Blog Spam, spam en webl0gs 11/19/2003 09:18 AM

SPAM on your BLOG?


SPAM on your BLOG? 11/27/2002 07:45 PM

Blog Spam


Blog Spam 03/19/2005 02:22 AM

What's to stop people from spamming Feedster and other blog search engines? At what point does a blog entry cease to become "real" and crosses the line into shilling for a product or company?

I found this today. While searching for a particular term over at Feedster, I found several "blog entries" that were nothing but thinly veiled advertisements. They had the veneer of independent thought, but as you read them, it was obvious that they were pitching one thing or another. So these people essentially spammed Feedster.

And where is the line? On this site, we've talked glowingly about EditPlus , PowerGrep, PHPRunner, Image Genius, and lots o f books, but they were honest representations of how we thought. And we stood to gain nothing by posting them.

Is that the litmus test? If you stand to gain nothing, then it's okay? But if you have a financial interest, then it's not okay?

We tend to look at the "blogosphere" as this pure environment, but it's bound to get crapped up by spam sooner or later. It's already happened for penis enlargement. Everything is bound to follow.


Even my bl0g is getting spam!


Even my bl0g is getting spam! 10/28/2003 11:09 PM
Well, it was s upposed to happen sooner or later. My blog is getting spammed. That makes turning the comment feature off very tempting, but until it becomes unmanageable I won't. I appreciate the comments too much :-)The other possible...

MSN Goes After Blog Spam


MSN Goes After Blog Spam 08/12/2004 09:33 AM
"One good way to make money is to boost your "Google Ranking" by posting comments... Obviously, posting comment spam on MSDN blogs will really jack up your rank, because we tend to get linked a lot..."

Rising bl0g-spam


Rising bl0g-spam 11/06/2003 05:07 PM
While it's sad, and more than a little pathetic, blog spam, like all the other sorts of spam, seems to be on the rise. I've been getting more and more comments posted that aren't anything more than links to some pill site or other. Having some of the antispam MT plugins helps,but still, there's a bunch I need to go hand-delete. (After which I generally IP-ban the poster, which has worked as well to cut down on the spam, though I worry about the collateral damage) It's really sad, though. Yeah, it means more work for me, and more maintenance,...

Blog spam... I give


Blog spam... I give 12/24/2003 12:07 PM
I already have the MT-Blacklist plugin installed, but manual updates to the blacklist aren't cutting it--too much would've-been-caught crap's making it through. Time to break down and automatically update the blacklist. Luckily someone's already got a tool. (Yeah, it's python, but I honestly don't care what's in the Happy Fun Ball so long as it works) At least I get comments mailed so the crap gets seen quickly and doesn't linger, but I'd rather it not be up in the first place....

A solution for bl0g spam?


A solution for bl0g spam? 09/06/2004 09:09 AM
I am currently planning my own CMS geared toward blogging, since I either just don’t like the CMSes I’ve reviewed,...

Dealing with Blog Spam


Dealing with Blog Spam 03/14/2005 05:34 PM
For the past few days, we've experienced a bit of a slowdown in the timeliness of our data. To give you an idea, our normal median time between being pinged by a blog and having the data available in...

Blog spam (not the usual kind)


Blog spam (not the usual kind) 02/01/2005 09:47 PM
I got a mail advertising a new Finnish movie blog hosted on blogspot.com. I was going to let it pass quietly and ignore it, but apparently the same person has been mailing other< /a> bl oggers, as they seem to have received the same spam as well. Because spam it is - unsolicited mass advertising, quite illegal in Finland.

Jussi whoever you are: that was really dumb. This is not the right way to gain good publicity. In fact, it's not even a good way to gain any publicity, as I will never link to your blog now because of your spam (and will remember this for a long, long time, too). Stop doing that.


"Tipping Point: Blog Spam"


"Tipping Point: Blog Spam" 06/21/2004 09:19 AM

what martin tobias wants from the
nextgen web


what martin tobias wants from the
nextgen web
08/06/2004 11:34 AM
all he wants is for it to be more human.

Porno bl0g spam turns nasty


Porno bl0g spam turns nasty 08/04/2004 08:22 AM
Smut attack via compromised military proxies

Blog star 'fesses up to payola spam scam


Blog star 'fesses up to payola spam scam 03/31/2005 05:55 PM
Google objects to CNET staffer's Adsense-bait

Blog comment spam solutions and the
coming arms race


Blog comment spam solutions and the
coming arms race
05/14/2004 10:16 PM

Jeremy Zawodny recently wrote something about weblog spam. John Battelle picked up on it today. Six Apart has just released a centralized comment authorization system called TypeKey. I've been thinking about comment spam for some time, and I've got a radical solution - one that I believe is the only one that has a chance at working.

I think that all these blacklists, etc are the entirely wrong approach. They will serve to create an ever-escalating arms race between spammers and bloggers, resulting in the wasteland that we have today with email and Usenet (anybody remember Usenet?)

The problem is one of accountability. Whenever you have a system where someone can insert an unaccountable message into a message stream, abuse always follows. This has happened with Usenet, email, and now blog comments. As long as people see some gain to be had for perpatrating the abuse, and the abusers are unaccountable, they will do so. The protocols are fundamentally broken: for example, they allow spammers to forge From: addresses in email and they allow comment spammers to add arbitrary content to arbitrary blogs. And the authentication services only serve as a minor deterrent - spammers are now using the prospect of free porn to get people to fill in the "only-humans-can-decipher" image codes (captchas) that spam blocking services are using, for example. It is a classic arms race.

Here's my suggestion: Turn off comments altogether, and let people who want to comment get their own blog. When they link to you, they'll get picked up by services like Technorati which will automatically show their comments whenever doing a search for your post. This is what the folks at BoingBoing (and many other sites) have been doing, and it eliminates spam because it enforces accountability - you've got to have a publically addressable place on the net where your words appear - and that place is owned by you. The cost of setting up the blog lies with the commenter, which is the way things ought to be. We're working on some ways to easily show the number of people who have linked to a particular post, in real-time, which will make it easy to show the interesting articles dynamically - e.g. "Blogs Linking To This Post (15)" instead of just "Blogs Linking To this Post". Stay tuned.

Now, this doesn't completely eliminate spam - for example, I could set up a SPAM blog, and create links out the wazoo to all of the major sites. For a while, the SPAM blog site will show up in the Technorati Link Cosmos of each site that it links to, but it soon becomes easy to eliminate - for example, the SPAM site will never get an inbound link from people who I care about, and that can be used as a filter on the inbound links page. The spammer (and his site) would also quickly gain a reputation as a spammer, and could therefore be easily tracked. For example, a set of spam-hunting sites could link to the SPAM site, and you could have a filter that only showed links as comments if less than 2 of the spam-hunting sites linked to the site, or any metric that you wanted. Think of it as a distributed slashdot karma system, if you will. And you wouldn't be limited to using Technorati for this, other sites could come about that do a better job than we do, and you could use them.

Some might suggest that this is a bad system, because people who wanted to remain anonymous couldn't comment. That isn't true - Accountability doesn't mean the end of anonymity, take Salam Pax's blog as an example of this. Of course anonymity (or perhaps pseudonymity?) does bring a set of challenges, like "Why should I trust someone who won't tell me his name?" but these can be worked through if the pseudonymous blogger proves reliable and trustworthy over time.

Of course, you may ask yourself, "If this Sifry guy is so against comments, why does he enable them on his own site?" I have employed anti- comment spam measures in the past, which are working for now. Since I don't get enough blog spam right now to make the tradeoff, but I have no doubt that the day will come. I'm also technical enough to know how to do all this stuff, and my goal is to fix the underlying problem in the system, not to just patch things piecemeal. And I'll admit to not being 100% convinced that this is the right way to go, so I'm testing the waters of both approaches.

And besides, we'll get a whole bunch more bloggers in the world this way. More permalinks are good. Comments and feedback are welcome. :-)


Fascinating interview with Jonathan
Hoefler and Tobias Frere-Jones


Fascinating interview with Jonathan
Hoefler and Tobias Frere-Jones
03/27/2005 02:51 AM
Forensic types

eyemagazine.com/feature.php?id=119&fid=532
track this site | 2 links


Spam, spam, spam, spam ... Canada
targets unwanted email (AFP)


Spam, spam, spam, spam ... Canada
targets unwanted email (AFP)
05/12/2004 04:17 AM
AFP - Canada unveiled a new action plan to combat unsolicited commercial e-mail, nicknamed spam, which jams inboxes and clogs Internet traffic worldwide.

Finance Spam Passing Drug Spam While
Porn Spam Is Washed Up


Finance Spam Passing Drug Spam While
Porn Spam Is Washed Up
05/24/2004 05:37 PM
The latest study on spam trends appears to show that financial spam is outpacing pharmaceutical spam - though, honestly, so much of both is coming out that it's really hard to imagine that this matters at all. Meanwhile, it seems that porn spam is increasingly less interesting to spammers as the numbers have been on a noticeable decline for quite some time. No matter what, though, it appears that CAN-SPAM has done absolutely nothing to slow down the amount of spam sent.

Trackback


Trackback 12/03/2002 11:46 AM

Will someone test my trackback for me? I don't believe that it works. Or perhaps no one has ever used it. Please :-) Can you leave me a comment that you did as well? Thanks!


"TrackBack (2)"


"TrackBack (2)" 06/11/2004 12:52 PM

TrackBack (0)


TrackBack (0) 08/15/2004 02:34 AM

demsformars.com/blog1/mt-tb.cgi?__mode=view&entry_id=351
track this site | 2 links


"Trackback [0]"


"Trackback [0]" 06/18/2004 04:59 AM

"Trackback [30]"


"Trackback [30]" 06/18/2004 04:59 AM

Net-Trackback-1.01


Net-Trackback-1.01 12/24/2004 12:10 PM

Net-Trackback-0.992


Net-Trackback-0.992 04/22/2004 05:37 PM

Net-TrackBack-0.21


Net-TrackBack-0.21 03/19/2003 10:24 PM

"0 Trackback(s)"


"0 Trackback(s)" 01/03/2004 07:07 PM

Grok Description matches for Tobias Schlitt's Blog: Thoughts on Trackback Spam (Services_Trackback)
GrokA matches for Tobias Schlitt's Blog: Thoughts on Trackback Spam (Services_Trackback)

Tobias Schlitt's Blog: Thoughts on Trackback Spam (Services_Trackback)

The following phrases have been identified by the grok system as matching this entry:

















Also check out:


Grok

Ipod Porn on the
Rise

Brief Abstract of
Wikipedia's
Mesothelioma Cancer
page

Get first aid
instructions in your
cell phone

IE is crap
JSPWiki gains
podcasting support

O'Reilly: Calling
SOAP Servers from JS
in Mozilla

Chris Davis' Blog:
Secrets of WordPress
Theming (Series)

Sony's Chief Pledges
to Halt Company
Slide

A Single-Use
Camcorder That Is
Used Over and Over

Microsoft Will Pay
Legal Costs if
Technology Partners
Are Sued

A Camera That Seems
as Thin as the
Prints

A Choice for the
Heart

You've Got Mail,
Where You Want It

Sony Buys Warner
Brothers' Matrix
Game

Bank in Utah Says
Its Data Was at Risk
in Intrusion

Into the Light:
Beyond a Fear of
Fixtures

A Sound Body
Beyond Wi-Fi: Laptop
Heaven but at a
Price

A Dizzying Array of
Options for Using
the Web on
Cellphones

Yahoo Closes Chat
Rooms Used for Sex
Talk

Flaw Is Found in
Software Used to
Accredit Hospitals

New EBay Service
Aims to Stem
Merchant Exodus

Cutting Here, but
Hiring Over There

Almost All Libraries
Offer Free Web
Access

An Army of Soulless
1's and 0's

Response to Mike
Migurski's tecznotes
baffled post

Gnomedex 2005
pink champagne and
swimming pools

shuffle up . . .
Online drives
entertainment sales

Parents 'ignore game
age ratings'

Supercomputers step
up the pace

Indian call centre
'fraud' probe

EBay blocks further
Live 8 sales

Girl probes
'PlayStation thumb'

BT ducks break-up
with price cuts

One in three music
CDs 'illegal'

Websites alienate
Firefox users

Software piracy
'seen as normal'

Passwords 'up for
grabs'

EBay seeks sellers
for expansion

Iran targets dissent
on the net

There and Back
Again: Thunderbird
to Outlook

Whalers Knocked Down
Policing Security
Compliance

Fart Friday
America's Army
Tournament at the
DGXPO

America's VideoGame
Expo Announced

DVD Game Premiums
Provide Product
Placement
Opportunities for
Marketers, High
Value to Consumers

The Giovani Edition
Children's Choir
Library Released

Game Tunnel
Announces its May
Independent Game
Round-Up

‘Hole in One’
Instead of ‘Hole in
the Wall’ Office?

Webcast ONE™ Video
Player Selected by
Partsbase.com for
Online Video
Presentations

Linux in Government:
How Linux Reins in
Server Sprawl

Trying Oracle on
Linux in the
Enterprise

what is grok?