Back to previous post: Die, spammers, die

Go to Making Light's front page.

Forward to next post: The Holy Spirit gets around

Subscribe (via RSS) to this post's comment thread. (What does this mean? Here's a quick introduction.)

November 19, 2004

Har har
Posted by Teresa at 04:24 PM *

If we weren’t running Movable Type 3.121 plus MT Blacklist, right now you’d be seeing the havoc caused by 300-odd comment spams hitting our weblogs. They’re not getting through.

Inseparable, my nose and thumb.

Comments on Har har:
#1 ::: sean bosker ::: (view all by) ::: November 19, 2004, 04:41 PM:

You have pleased the technology Gods and we all share in the fruits of your labor. A plague of spam, thwarted!

#2 ::: Hormel McSpammer ::: (view all by) ::: November 19, 2004, 04:43 PM:

That's interesting. I just found a great deal on lost frogs.

#3 ::: Alex Cohen ::: (view all by) ::: November 19, 2004, 04:43 PM:

Hee hee.

Uh, don't kill me.

#4 ::: xeger ::: (view all by) ::: November 19, 2004, 04:56 PM:

Heh. Isn't it great when it works?

My latest irritation is the regular raft of email to the subscription address of one of my mailing lists - clearly caused by -somebody- (probably sombodies) with an address book virus. I still haven't found a good way to deal with that, since it does seem to be legitimate mail.

#5 ::: James D. Macdonald ::: (view all by) ::: November 19, 2004, 06:53 PM:

Three hundred or so spams as a group seems to be a common pattern on what hits this web log.

Interesting. Did you get a copy of one?

#6 ::: pericat ::: (view all by) ::: November 20, 2004, 12:44 AM:

It's great when stuff works just right, eh?

#7 ::: Sean Bosker ::: (view all by) ::: November 20, 2004, 12:52 PM:

What just killed my last email address was some spammer using my my email in the 'from' field. I was getting hundreds of bouncebacks a day. I made sure that they weren't actually coming from me, and they weren't but it forced me to shut down an email address I've had for years.

#8 ::: Mitch Wagner ::: (view all by) ::: November 20, 2004, 07:55 PM:

PNH/TNH: I've found that one area that the current version of MT-Blacklist lags the previous version is in dealing with large spam attacks.

I have MT-Blacklist configured to hide comments that match the criteria of potential spam. That means I need to manually approve comments on posts older than 2 weeks old, or comments with more than five URLs in them.

That also means I need to manually delete spams fitting those criteria.

With MT-Blacklist 1.x, that was fairly easy. Since a large spam attack would have the same URLs in every message, I could just select one comment, de-spam it, add the URLs to my blacklist, and then press the button that causes MT-Blacklist to check the 250 most recent comments against the blacklist, deleting any comments containing blacklisted URLs.

Later, rinse, repeat until clean.

The new version of MT-Blacklist does a far better job of tagging spam--it's been 100% accurate for me in the several weeks I've been using it. But it's got NO functions that I've been able to find for batch-despamming of messages.

If I were ever to get 300 comments of spam in one day, I'd hve to manually click on each of those 300 messages to delete them. Ow!

Have you been able to find a faster way of dealing with spam attacks, short of outright blocking comments on messages >2 weeks old, or with >5 URLs?

Sean, what happened to you is called a "joe job." Google that phrase if you want to learn stuff. As far as I know, there's nothing you can do about it.

#9 ::: pericat ::: (view all by) ::: November 21, 2004, 04:42 AM:

Here's an article that describes joe jobs and offers advice in countering them.

#10 ::: Mitch Wagner ::: (view all by) ::: November 21, 2004, 03:26 PM:

Pericat, good article.

When I said there's nothing you can do about a joe job, I was—to use a technical journalism word—wrong. I was thinking about Point 3 and Point 4 of the points raised in the article you cite: there's nothing you can do to save the e-mail account that was joe-jobbed, and nothing you can do to convince some people who will never believe your statements that it was not you who sent the original e-mail.

#11 ::: Dave Bell ::: (view all by) ::: December 02, 2004, 05:45 PM:

I comment here to note that the most recent Open Thread is now a big enough web page to be awkward.

Smaller type (our default)
Larger type
Even larger type, with serifs

Dire legal notice
Making Light copyright 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017 by Patrick & Teresa Nielsen Hayden. All rights reserved.