Free Technology Newsletters
» All 33 InfoWorld Newsletters
Technology & Business Daily
 
InfoWorld
 
   

Suspending Anonymous Posting

By Ed Foster, Section The Gripelog
Posted on Fri Dec 01, 2006 at 12:18:29 PM PDT

With considerable reluctance, I'm trying an experiment right now on my website in hopes it will help us combat the link spam attacks that have plagued us in recent weeks. For the time being, I've suspended anonymous posting of reader comments on the Gripe2ed.com website. Readers who don't already have a log-in account on my site will have to create one here in order to post their comments.


I've always been a great believer in encouraging discussions on my stories by allowing free access to anyone who wants to post. The downside of that has always been that the link spammers can get through too, and more and more frequently they seem to have exploits that bypass any of the controls we have installed to deter them. Over the last week my server has crashed almost nightly due to the concentrated frenzy of link spam posts all over my site. While the server usually reboots on its own, the comment-posting engine itself does not always do so without human intervention, meaning posting by anyone can be impossible for hours on end.

So if we're to have any reader comments at all, it seems we have little choice but to see what happens if we restrict posting to those with log-ins. I'm not sure yet if it's actually going to solve the problem, and if it doesn't make for a significant improvement, we'll reinstitute anonymous posting and look for another solution.

And let me just emphasize to those who think creating a log-in account will somehow compromise their privacy that all it takes to create an account is a working e-mail address. Your e-mail address is used only for confirming your registration and sending your password, and the e-mail addresses and passwords remain on my server and are not provided to InfoWorld or anyone else for any other purpose.

Plus, there are some advantages to having everyone who participates in a discussion use a distinct log-in. It makes for better threaded dialogues when you can tell one reader's comment from another and provides a better sense of an online community. Once you're logged in, it also makes it much easier for you to see new comments in different conversations on my site without having to read through comments you've read before.

So I hope those of you who have been posting anonymously on my site will consider creating a log-in while we run this experiment. It's a simple procedure to create a log-in on my site. Just go to my sign-up page and enter your desired username and email address in the respective fields. An autogenerated password will be sent to you in an email with which you can log on and change your password to whatever you like.

Like I said, I don't know yet if this is going to be the solution. But it's worth a try to see if we can keep the spammers from beating us, don't you think? As always, I invite you to post your comments below, or write me at Foster@gripe2ed.com.

< A New Day for Corporate DRM | Holiday Shopping Reaches New Lowe's >


Display: Sort:
Suspending Anonymous Posting | 14 comments (14 topical) | Post A Comment
Free email signups[ Reply to This ] (none / 0) (#1)
by foxyshadis1 on Fri Dec 01, 2006 at 02:36:04 PM PDT

Random sites with free email, besides your generic hotmail/yahoo/etc, so that no one gets paranoid about spam and privacy:

fastmail.fm
mail.com
popmail.com

Oh, here's a whole directory of them: http://www.fepg.net/providers.html

And you can throw the account away as soon as you're registered, unless you expect to forget the password occasionally.

[ Reply to This ]



Sad[ Reply to This ] (none / 0) (#2)
by tcsbiz on Fri Dec 01, 2006 at 03:40:31 PM PDT

Ed,

I thank you for your efforts to keep the site open against the constant onslaught of link spam. It is a sad commentary on those who would attempt to deny usage of the website. It is really bad that the bastards win when we have to change a business or operating model but there is not much we can do.

Thanks.

Tom.

[ Reply to This ]



It's all over.[ Reply to This ] (none / 0) (#3)
by sconeu on Fri Dec 01, 2006 at 06:03:40 PM PDT

I'm on a site dedicated to nitpicking TV shows, movies, etc....  and we had to do the same thing.

In fact, 90% of the site is closed down while the site owner is getting a software upgrade from his vendor.

We hope that the new version will block the spambots.

Personally, I'd love to see all such spammers ... well... you know...

--
I am not merely a "consumer" or a "taxpayer". I am a Citizen of the United States of America.
[ Reply to This ]



I quite agree[ Reply to This ] (none / 0) (#4)
by jtuomi on Sun Dec 03, 2006 at 07:28:00 AM PDT

You are totally right in what you are doing.

I myself lost a discussion board last summer, with over 4 year's worth of posts. I had no backups (I don't know if I even could have made a backup of the board), and after about a month's flood of spam (totally over 5000) (I was on my summer vacation at that time) all my previous posts where flushed into the toilet (I have a free discussion board which has a rather low limit to the number of posts. When the limit is reached, the oldest ones are removed...).

I have now activated a so-called "security word" feature, not so convenient for the posters, but so-far: no spam!

[ Reply to This ]



Hiding the user's name[ Reply to This ] (none / 0) (#5)
by tscoff on Sun Dec 03, 2006 at 10:22:34 AM PDT

Is it possible to require that someone log onto the site before posting, but still give them the option of hiding their name when they post?  That will combat the robots but will still allow people who have accounts to hide their identities if they so desire.

[ Reply to This ]


Thanks Ed...[ Reply to This ] (none / 0) (#6)
by In my humble opinion on Mon Dec 04, 2006 at 03:07:58 PM PDT

...for your continued efforts to stay on the air while being under siege. While I am disgusted by the tactics being used by link spammers, the sad reality is that this is capitalism (without ethics) in action. Most of these people would not create the tools for link spam unless there was a financial payoff for their efforts.

I suspect that only when the Internet search engines change to an alternate web page ranking mechanism, perhaps like the popularity ratings used by del.icio.us, will the spammer's behaviour change. I seriously doubt they will be reformed and will move quickly to their next moneymaking campaign. It's kind of like pest control, you can neutralise the infestation, kill many of the bugs, but some of the population always survives and migrates elsewhere.

I personally support the requirement for signed postings but I know that many others do not. I would like to know who is saying what in some of these "discussions", anonymous posting makes it hard to know who is "talking". But if there is a large demand for anonymous posting, perhaps somebody can offer a clever solution to your battle with the spammers.

First suggestion - perhaps you could require anonymous posters to enter a alpha-numeric string from a non machine-readable image. Similar to the procedure used for new Email accounts, it would prevent robots from completing the registration transaction.

[ Reply to This ]


Great Article, i agreee with you[ Parent | Reply to This ] (none / 0) (#16)
by Anonymous User on Mon Sep 01, 2008 at 10:17:31 PM PDT

dis j'ai jamais vu de poisson sans ouies........et avec une forme pareille.......Internet Marketing 迷你倉 護膚 .

[ Parent | Reply to This ]


It's a sad day when[ Reply to This ] (none / 0) (#7)
by LinearBob on Tue Dec 05, 2006 at 09:19:50 PM PDT

the spammers win. I don't have a problem with logging in, so long as my email address cannot be "harvested" which is why I entered what MAY be a harvest proof email address. I use a yahoo address specifically so I can access my email from anywhere, including the public library and friend's houses. It seems that my email address has been "harvested" as it is, because the Yahoo SPAM filter now catches between 200 and 250 SPAM emails per day. If that SPAM filter was not there, my Yahoo account would be useless. As it is, I still need to scan the SPAM folder because Yahoo's filter makes a mistake at about a 1% error rate, so I can expect to find 1 or 2 legitimate emails that it wrongly classified as SPAM. In the other direction, the error rate is about 4%, with about 1 SPAM per 25 messages in my In Folder. For the most part, I can live with this, but if I had my own mail server, I would have to find some SPAM filtering software quickly, or it would be overwhelmed. With the ever increasing volume of SPAM in mind, I'm surprised you were able to keep your "Gripe Line" open as long as you have. If you need to go to using one of those garbaged up "word" things that block spambots, go for it. I don't mind having to figure out what the letters and numbers are amid the hash marks, etc., if that is what it takes to keep "Gripe Line" available to us. I can see a reason why someone might not want to post anything with a traceable user name or email account, especially if they are "blowing the whistle" on something their employer is doing that the world should know about. So please try to keep it such that an anonymous post is possible. Thanks for at least trying to fight the SPAMers of the world for us.

[ Reply to This ]


New York Times Article on Spamming[ Reply to This ] (none / 0) (#8)
by srynas on Wed Dec 06, 2006 at 06:20:07 AM PDT

http://www.nytimes.com/2006/12/06/technology/06spam.html?_r=1&ref=business&oref=slogin
-------------------------------------------------
New York Times
December 6, 2006
Spam Doubles, Finding New Ways to Deliver Itself
By BRAD STONE

Hearing from a lot of new friends lately? You know, the ones that write "It's me, Esmeralda," and tip you off to an obscure stock that is "poised to explode" or a great deal on prescription drugs.

You're not the only one. Spam is back -- in e-mail in-boxes and on everyone's minds. In the last six months, the problem has gotten measurably worse. Worldwide spam volumes have doubled from last year, according to Ironport, a spam filtering firm, and unsolicited junk mail now accounts for more than 9 of every 10 e-mail messages sent over the Internet.


[ Reply to This ]



So what's the big deal with anonymous posting[ Parent | Reply to This ] (none / 0) (#9)
by rodak on Thu Dec 07, 2006 at 01:18:32 PM PDT

I mean, what exactly is the big problem with signing up for the site to participate in the discussion?  Privacy?  So if you don't trust Ed, get a Yahoo or Hotmail account - problem solved.  Anonymity?  So who really knows any more about me because my name is "rodak" and not "anonymous"?  Extra hassle to post?  Most browsers will remember your userid and password, and if you're worried about someone stealing your computer and hijacking your GripeLog account, well.....

Maybe I'm missing something - will somebody clue me in?

I hate spammers as much as anyone (I spend a lot of time on my job combating them), but to me this is a real trivial issue - so you can't post anonymously on the GripeLog any more,  big deal!

I'll be glad not to have to wade through a bunch of anonymous posts trying to figure out who's saying what and who's responding to who.  


[ Parent | Reply to This ]



Can old linkspam?[ Reply to This ] (none / 0) (#10)
by jimdoria on Mon Dec 11, 2006 at 01:53:49 PM PDT

I'm glad to hear you've taken steps to deal with this offal, and I too am sorry it's necessary. I guess it's the downside of the internet - every thug from anywhere in the world effectively lives on your block. Any chance someone could spare the admin time to go back to the older posts and delete the linkspam that's already there? It hurts my eyes to read those posts, and there's no point letting these bottomfeeders make even one more ruble from the links in those comments.

[ Reply to This ]


logins ok[ Parent | Reply to This ] (none / 0) (#11)
by rj2046 on Tue Dec 12, 2006 at 04:49:15 AM PDT

Thanks for providing an intelligent and useful forum. Logins and all.

[ Parent | Reply to This ]


Doing so.[ Parent | Reply to This ] (none / 0) (#12)
by foxyshadis1 on Tue Dec 12, 2006 at 05:05:55 AM PDT

I'm working on it. I had to write a couple industrial-strength scripts, but it shouldn't take too long to wipe out that mess now. (This site's html is a scripter's nightmare - hours of testing just to get a simple "delete any comment with more than 20 links" working.)

[ Parent | Reply to This ]


Looks like it's time to start banning[ Reply to This ] (none / 0) (#15)
by sconeu on Thu Dec 21, 2006 at 08:08:38 AM PDT

Looks like you need to block this "slavik" user.

--
I am not merely a "consumer" or a "taxpayer". I am a Citizen of the United States of America.
[ Reply to This ]



Suspending Anonymous Posting | 14 comments (14 topical) | Post A Comment
Display: Sort:
Recent Entries
A few things
15 comments

Thank you
19 comments

Ed Foster: 1949-2008
80 comments

Dell notebook turns into a Bad Buy
15 comments

Of Apple, Psystar users, and copyright
12 comments

The suspicious death of XP support
38 comments

More The Gripelog...

Submit a gripe
About the Author
Email Ed Foster

Help Ed and his readers build these projects:
The Gripewiki
The EULA Library

Login
Make a new account
Username:
Password:

Live Gripes
Has AOL Changed Their Ways?
52 comments

A Nestle SweeTarts Conspiracy
205 comments

AT&T Kills "Bad" Username
211 comments

DESPERATE! AOL HAS TAKEN OVER MY COMPUTER
285 comments

parkingticket.com SCAM on refunds
195 comments

Don't let Net Enforcers Ruin Your Day.
108 comments

More Live Gripes...

Sign up for my newsletter

To have my column automatically e-mailed to you, submit your email address in the form below. Of course, I will not turn your address over to any other party or send you any unrequested e-mail.

Infoworld Blogs

Recomended Sites
The AFFECT Coalition
Electronic Frontier Foundation
Electronic Privacy Information Center
Free Software Foundation
HearUsNow.org
Public Knowledge
StopBadware.org

Jeff Angus
Ben Edelman
Dan Gillmor
Bob Lewis
Brian Livingston
Freedom to Tinker
Lawmeme
PC World's Techlog
SunBeltSoftware Blog
Troubleshootsers.com

Rss Feeds
How this works
 Top News 
 Columnists 
 Tech Watch 
 Test Center Reviews 
 Applications 
 App Development 
 E-Business Solutions & Strategies 
 End-user Hardware 
 Networking 
 Operating Systems 
 Platforms 
 Security 
 Standards & Protocols 
 Storage 
 Telecommunications 
 Wireless 
 Web Services 

 

create account | faq | search