With bloggers squashing obviously-spammy links* as fast as they can, comment spammers have evolved. (I think they’ve reached the level of slime mold now, rather than amoebas.) They’re trying to make their sites look like blogs. And I’m seeing two main techniques, one involving Trackbacks/Pingbacks, the other involving manual person-at-a-keyboard commenting.

Misusing Pingbacks and Trackbacks

Pingbacks and Trackbacks are two ways for one site to notify another that it’s linked to it, and provide an excerpt of the context. Essentially, they’re automated comments. You read a post on some other site, you write your own response, linking to the original post, and your blog software submits the equivalent of “Hi, I read your post, and it got me thinking. I ended up writing my own post over here…”

Where spam is concerned, the main difference is that with Trackbacks, the submitting site provides an exceprt, but with Pingbacks, all it submits is the URL. The receiving blog then retrieves the page and scans it for the link, building an excerpt from the context. The upshot of this is that Pingbacks automatically verify that yes, the site really did link to you, which meant that a lot of early comment spam was submitted using Trackbacks.

The obvious response to that was to set up spam protection to verify links on incoming Trackbacks. And the obvious response by the spammers was to put up real links, at least long enough to let the victims verify them.

So now, a lot of trackback/pingback spam seems to come from sites running actual blogging software, but not really posting any content. Just “So-and so wrote an interesting post today” over and over, hundreds of times a day. Half the time they don’t bother to match the name to the actual link. This is the kind of spam that prompted my recent re-evaluation of spam plugins on this site.

Sneaky Intermediary

Then there was the sneaky post I got on Thursday. It was a sort-of half-on-topic comment on a post about movies, and the author’s URL pointed to what appeared to be a blog about movies. OK, fair enough, but I was still a bit suspicious since it didn’t look like they’d actually read my post.

I skimmed the site looking for things like cobbled-together sentences, and an idea of how long it had been around. Then there was a random post about guitars, in a different writing style. I figured, okay, maybe they’re doing one of those paid-post things.

Then I moved the mouse cursor over one of the links.

It quickly became clear that every single outgoing link on the front page was pointing to ultimate – free – downloads – dot – com, whether it was a movie title, or an actor, or a song title.

At this point I’m not sure whether the site in question is simply an elaborately designed intermediary created to “launder” the links to spam sites, or whether it’s a legit blog that’s been hijacked by someone replacing their links. I looked around at some of the older posts and I do see links to Amazon and a couple of other sites.

*This is also why I’ve stopped using the Alternative Browser Alliance as my URL when commenting on browser-related blogs. Even though I’m making an on-topic comment, I don’t want people to take a look at the link, say, “Hey, this isn’t a person, this is some weird campaign thing!” and delete the comment…and worse, get a rep as a comment spammer. So these days I just link everything here.

I just realized that as of last week, this blog has been online for 5 years.

Crazy, huh?

This is the 1,398th post. We’ve got 2,307 comments at the moment, including pingbacks. Typical traffic these days seems to run around 650-700 views on weekdays, 550-600 on weekends. Most of it seems to be people searching for images.

The top-viewed posts lately have been:

  1. Songs Not to Play at a Wedding (Normally #2, but it got something like 3000 hits from StumbleUpon last week.)
  2. Comic Con 2003
  3. Philosophy of Time Travel
  4. Creative Computer Names

Judging by a quartet of comments posted this evening, 3 of which slipped past Spam Karma, someone’s started outsourcing comment spam to India. (I’m serious, the IP addresses were assigned to Bharti Airtel and BSNL Internet, both ISPs based in New Delhi.)

They were posted quickly, as if they’d been composed in another editor and pasted into the form. More importantly, they were actually posted through the form, not just sending data directly to the handler. And most tellingly, the posters had gone to the effort to fill out the CAPTCHA that Spam Karma provides to allow human commenters to recover from a false positive.

The one I liked best, from a technical perspective, was posted on Tall Ships of San Diego. The spammer had followed my link to the San Diego Maritime Museum, then followed that to a page describing one of the ships, the Californian, and generated a post by stringing together sentences from that page. The whole thing linked to a student loan site.

At first glance, it looked like a garbled, on-topic comment from someone who maybe didn’t speak English as their first language. That happens, and if it’s a legit comment, I leave it. In fact, I considered leaving the comment but deleting the author URL, until I looked up the ship. (It wasn’t one of the ships we toured on our visit, and I didn’t recognize the name.) As I looked at the ship’s profile, I started recognizing text from the comment. At that point it became clear what was going on, and I started looking at the other comments posted over the last few hours.

Figured what the heck. I’m now on ComicSpace.

Because I need yet another site to suck up all my time.

It’s being described as MySpace for comics people—creators, fans, reviewers, etc.—though the feature set is pretty sparse right now. I’ve resisted MySpace itself partly because of a somewhat adversarial relationship with the site*, partly because I can’t stand looking at most MySpace pages, and partly because my friends are all on LiveJournal, so there’s really no compelling reason for me to go there.

And yet I’ve got profiles at LiveJournal, Slashdot, Opera, WordPress, Spread Firefox… Even eBay is adding blogging capabilities. Maybe I should bite the bullet and sign up for a Blogger account too. At least then I’ll be able to comment on Crimson Lightning.

*The culture at MySpace seems to encourage hotlinking images without asking. I’m still a writer at heart, so I consider the commentary to be as important as the images or more… and it really annoys me when people en masse just embed the images on their own site. Though I suppose it’s not as bad as the occasional “geniuses” on other forums who will hotlink an 800×600 or bigger photograph as their avatar, even though it only displays at 80×80. Damn kids, get off my lawn!

The Blood KnightSorry I haven’t posted much here lately. The main reason is that I’ve been re-reading Greg Keyes’ Kingdoms of Thorn and Bone series before picking up The Blood Knight. (I’ve also been spending time at the Comic Bloc Forums discussing the Flash relaunch.)

Re-reading The Briar King and The Charnel Prince both followed the same pattern: I read half of the book over the course of the week, then finished it on the weekend. I started the new book, The Blood Knight on Saturday morning and basically spent the weekend on the couch reading. About ¾ of the way in I realized acutely that, no matter how fast I read it, there would still be one book left when I finished.

It’s funny, when I first read The Briar King I didn’t like it much. I think mainly I was expecting something less steeped in medieval Europe (based on The Waterborn and The Blackgod). I picked up The Charnel Prince anyway, and liked it much better, and quite enjoyed The Briar King when I reread it.

One thing that’s unusual about this series is that there’s no Merlin figure. No Gandalf to show up in the first few chapters and explain what the Ring is, who wants it, and what has to be done with it. No Moiraine to explain who the Forsaken are, and what it means to be the Dragon Reborn. All the characters are pretty much figuring things out as they go. And they make mistakes—pretty nasty ones in some cases.

I’ve mentioned elsewhere that Greg Keyes and Neil Gaiman are the only authors whose work I will buy in hardcover, sight unseen. Looking at Keyes’ website, I realized that I actually own a copy of every book he’s published. There aren’t too many authors I can say that about.

Only 1½ years until The Born Queen