My blog has been PWNED

re:My blog has been PWNED

TrackBack — Mon, 08 Aug 2005 10:07:00 GMT

My blog has been PWNEDooeess

Re: My blog has been PWNED

William — Mon, 25 Jul 2005 19:45:00 GMT

I'm posting this reply using the CommentAPI crap that RSSBandit uses. That and the trackback API completely bypass the CAPTCHA.

Until something is done about those two services, you'll continue to have the problem. You could disable the web service for your own blog, but I think that drops trackbacks but I could be wrong. I think Community Server addresses some of this but I may be wrong. Hopefully SubText will take a good look at the services and put in some kind of protection because they need it badly. I could make a spam bot in a matter of minutes that could spam the crap out of multiple blogs with little effort on my part. Casey may have brought up the idea, but security by obscurity is a lame practice anyway. Sadly nothing's been done or attempted to address the problem it appears. This isn't something you or I as blog users can fix, it's something "Those with the Source" (tm) have all the power to combat, yet they seem to be sleeping on the job.

DoubleI receives a few comments

TrackBack — Fri, 22 Jul 2005 00:35:00 GMT

Yikes, I'm back on track with my reading and work and development and other stuff.  That means I...

re: My blog has been PWNED

William — Thu, 21 Jul 2005 23:22:00 GMT

KC - I forgot about that camp. I had heard some musings about that a few times, but I didn't really think they were being serious. After all, if they knew you, they'd know you don't roll like that and more importantly, you'd actually do something 'real' if you decided to go evil. Or, you'd at least be cool about it and post lesbian porn links or something.

Scott - I totally agree with you bro, but honestly, KC took some serious heat over that. Hell, there was a chorus calling for my head too b/c I gave KC props for it and refused to condemn it. He didn't IMHO do anything wrong and he went about it totally cool. One comment isn't 'spam' and posting your real identity and link back isn't what's causing all the problems... it's the bullsh1t spam.

Then as now, i think KC did us a service b/c he pointed out that any sense of security from CAPTCHA is more illusion than fact. Plus he showed me that there was a timer on it and that's why I often couldn't post (I thought I was just a dislexic dumbass all the time).

re: My blog has been PWNED

William — Thu, 21 Jul 2005 15:10:00 GMT

dont forget camp C) that i did it.
they like to throw that one out there too :(

re: My blog has been PWNED

William — Thu, 21 Jul 2005 14:33:00 GMT

Sucks man. But timely considering one of my latest blog entries. I dare anyone to say that this is caseys fault. He threw up the red flags months ago and people did nothing.

Anywya, sorry about the spam