<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>Caveat Lector &#187; Spam</title>
	<atom:link href="http://cavlec.yarinareth.net/category/computers/spam/feed/" rel="self" type="application/rss+xml" />
	<link>http://cavlec.yarinareth.net</link>
	<description>Reader Beware!</description>
	<pubDate>Mon, 01 Dec 2008 21:04:24 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
	<language>en</language>
			<item>
		<title>Elsevier spams</title>
		<link>http://cavlec.yarinareth.net/2007/02/22/elsevier-spams/</link>
		<comments>http://cavlec.yarinareth.net/2007/02/22/elsevier-spams/#comments</comments>
		<pubDate>Thu, 22 Feb 2007 22:20:20 +0000</pubDate>
		<dc:creator>Dorothea</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://cavlec.yarinareth.net/archives/2007/02/22/elsevier-spams/</guid>
		<description><![CDATA[Let&#8217;s just take it as read that I have a hate on for Elsevier. This is not news to anybody who&#8217;s been reading CavLec for a while. Take that into account as you read this post.
I got a press-release email just now, of which I reproduce the plain-text version (with full headers) below:
Return-Path: &#60;eitraining @mail.elsevier-alerts.com&#62;
X-Original-To: [...]]]></description>
			<content:encoded><![CDATA[<p>Let&#8217;s just take it as read that I have a hate on for Elsevier. This is not news to anybody who&#8217;s been reading CavLec for a while. Take that into account as you read this post.</p>
<p>I got a press-release email just now, of which I reproduce the plain-text version (with full headers) below:</p>
<blockquote><p>Return-Path: &lt;eitraining @mail.elsevier-alerts.com&gt;<br />
X-Original-To: dorothea@textartisan.com<br />
Delivered-To: m9011424@randymail-mx1.g.dreamhost.com<br />
Received: from carrie.dreamhost.com (sd-green-bigip-145.dreamhost.com [208.97.132.145])<br />
     by randymail-mx1.g.dreamhost.com (Postfix) with ESMTP id 6C6C034D26<br />
     for &lt;dorothea @textartisan.com&gt;; Thu, 22 Feb 2007 11:54:31 -0800 (PST)<br />
Received: from localhost (localhost [127.0.0.1])<br />
     by carrie.dreamhost.com (Postfix) with ESMTP id 1DE86CB0A<br />
     for &lt;dorothea @textartisan.com&gt;; Thu, 22 Feb 2007 11:54:26 -0800 (PST)<br />
X-DH-Virus-Scanned: Debian amavisd-new at carrie.dreamhost.com<br />
X-Spam-Score: 0.612<br />
X-Spam-Level:<br />
X-Spam-Status: No, score=0.612 tagged_above=-999 required=999<br />
     tests=[HTML_40_50=0.611, HTML_MESSAGE=0.001]<br />
Received: from carrie.dreamhost.com ([127.0.0.1])<br />
     by localhost (carrie.dreamhost.com [127.0.0.1]) (amavisd-new, port 10024)<br />
     with ESMTP id jmCcWw59Ut5h for &lt;dorothea @textartisan.com&gt;;<br />
     Thu, 22 Feb 2007 11:54:24 -0800 (PST)<br />
Received: from appsvr10.emailreaction.com (appsvr10.emailreaction.com [83.138.137.87])<br />
     by carrie.dreamhost.com (Postfix) with ESMTP id 4DD04C253<br />
     for &lt;dorothea @textartisan.com&gt;; Thu, 22 Feb 2007 11:54:22 -0800 (PST)<br />
Received: from mail pickup service by appsvr10.emailreaction.com with Microsoft SMTPSVC;<br />
     Thu, 22 Feb 2007 19:54:20 +0000<br />
Message-ID: &lt;1711881-220072422195420708@mail.elsevier-alerts.com&gt;<br />
X-Sender: eitraining@mail.elsevier-alerts.com<br />
X-EMR-ID: EVAQ4<br />
X-EMR-BOOTH: EEI001<br />
X-EMR-PP: X2JI5<br />
From: &#8220;Sabina Richardson&#8221; &lt;eitraining @mail.elsevier-alerts.com&gt;<br />
To: &#8220;Notification List&#8221; &lt;dorothea @textartisan.com&gt;<br />
Subject: FOR IMMEDIATE RELEASE: Engineering Village Introduces Record Tagging<br />
Date: Thu, 22 Feb 2007 19:54:20 -0000<br />
MIME-Version: 1.0<br />
Content-Type: multipart/related;<br />
     boundary=&#8221;&#8212;-=_NextPart_1711812422211765195420708&#8243;<br />
X-OriginalArrivalTime: 22 Feb 2007 19:54:20.0942 (UTC) FILETIME=[3E6AFAE0:01C756BB]</p>
<p>To display this email in a browser, please click here:<br />
http://mail.elsevier-alerts.com/go.asp?/bEEI001/qXGWMA3/xX2JI5</p>
<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;</p>
<p>Date: 22 February 2007<br />
Contact: Ross Graber<br />
Marketing Director<br />
Engineering Information<br />
+1 212 633 3695<br />
r.graber[at]elsevier.com</p>
<p>FOR IMMEDIATE RELEASE</p>
<p>Engineering Village Introduces Record Tagging</p>
<p>Allows Researchers to Interact With, Classify and Share Engineering Research Content</p>
<p>New York, N.Y., 22 February 2007 - Engineering Information (http://mail.elsevier-alerts.com/go.asp?/bEEI001/qOGW4A3/xX2JI5 ) announced the introduction of record tagging to Engineering Village (http://www.engineeringvillage.com ), an award winning web discovery platform designed for engineering researchers. Tagging allows Engineering Village users to apply meaningful keywords to database records to facilitate sharing records and retrieving documents based on user-generated data labels or &#8220;tags.&#8221;</p>
<p>Records from engineering research databases including CompendexÂ® and InspecÂ® and patents databases can be tagged by Engineering Village users. Users establish their own tags based upon what they find meaningful about a document. Documents can then be retrieved by searching for specific tags or sets of tags. Tagging facilitates a user&#8217;s ability to share meaningful content. Users will assign tags to documents and can choose to make those tags accessible to colleagues, peer groups and even to all the users in the Engineering Village community. Users may also opt to keep tags private for personal use.</p>
<p>&#8220;While tagging is often considered a Web 2.0 phenomenon, it is incredibly well suited for a professional quality information service like Engineering Village&#8221; said Rafael Sidi, Vice President of Product Development, Ei. &#8220;Engineering Village databases have traditionally relied upon records being classified by experts using structured indexes. Now, by adding record tagging the power to classify records and create content has been extended to our users. Users can now tag records based on how they define a record&#8217;s relevance and importance . By choosing to expose those tags, Engineering Village users&#8217; community is provided with a powerful way to<br />
identify engineering content other users find meaningful.&#8221;</p>
<p>News from Engineering Information can be subscribed to via RSS at http://mail.elsevier-alerts.com/go.asp?/bEEI001/q67WMA3/xX2JI5 </p>
<p>###</p>
<p>About Engineering Information</p>
<p>Engineering Information (Ei), which is a business unit of Elsevier, is the leader in providing online information, knowledge and support to engineering researchers. The company provides information research tools specifically focused on the content and intelligence that engineering researchers need to stay informed and step ahead of the competition. For more information about Ei and its products, including Engineering Village 2 , CompendexÂ®, and Ei EnCompass please visit www.ei.org.</p>
<p>About Elsevier</p>
<p>Elsevier is a world-leading publisher of scientific, technical and medical information products and services. Working in partnership with the global science and health communities, Elsevier&#8217;s 7,000 employees in over 70 offices worldwide publish more than 2,000 journals and 2,200 new books per year, in addition to offering a suite of innovative electronic products, such as ScienceDirect (http://www.sciencedirect.com/ ), MD Consult (http://www.mdconsult.com/ ), Scopus (http://www.info.scopus.com/ ), bibliographic databases, and online reference works.</p>
<p>Elsevier (http://www.elsevier.com/ ) is a global business headquartered in Amsterdam, The Netherlands and has offices worldwide. Elsevier is part of Reed Elsevier Group plc (http://www.reedelsevier.com/ ), a world-leading publisher and information provider. Operating in the science and medical, legal, education and business-to-business sectors, Reed Elsevier provides high-quality and flexible information solutions to users, with increasing emphasis on the Internet as a means of delivery. Reed Elsevier&#8217;s ticker symbols are REN (Euronext Amsterdam), REL (London Stock Exchange), RUK and ENL (New York Stock Exchange).</p>
<p>This press release was sent to you by Engineering Information (Ei). For further news, features and information visit http://www.ei.org. Engineering Information, 360 Park Avenue South, New York, NY 10010, USA. You are receiving this e-mail because you are a member of the press. We respect your privacy and do not rent, sell or disclose your personal information to any non-affiliated third party without your consent. Copyright Â© 2007 Elsevier Limited http://www.elsevier.com/. All rights reserved. Any unauthorized use, reproduction, or transfer of this message or its contents, in any medium, is strictly prohibited. </p>
<p>EI Privacy Policy<br />
http://mail.elsevier-alerts.com/go.asp?/bEEI001/qXYN4A3/xX2JI5</p>
<p>Email Reaction Privacy Policy<br />
http://www2.emailreaction.com/privacy_policy.asp?top<br />
[RL X2JI5]</p>
</blockquote>
<p>I don&#8217;t know how I got onto this list; it was surely not by any opt-in efforts of mine. I am also not &#8220;a member of the press,&#8221; though that little detail tends to indicate that they shoved me on their list merely because they felt like it. I tried logging into elsevier-alerts.com and got nowhere. ei.com is similarly unhelpful. There is no opt-out link in the email, neither in the plain-text nor the HTML version, so however I got onto this list, <em>I can&#8217;t get off it</em>.</p>
<p>That? Is spam, folks. It doesn&#8217;t matter that it&#8217;s coming from a semi-reputable company. I don&#8217;t want it, I didn&#8217;t ask for it, it&#8217;s commercial in nature. It&#8217;s spam. You tell me what that makes Elsevier.</p>
<p>Elsevier: get me off this list. Now, please. I only took this public because you didn&#8217;t behave like a reputable Internet company and give me a private way to take care of this business. (&#8221;We respect your privacy,&#8221; forsooth!) And if you want to make an issue of that copyright statement, <a href="http://cavlec.yarinareth.net/archives/2007/01/20/about-that-disclaimer/">I&#8217;ll see you in court</a>.</p>
<p>If this is a joe-job, I&#8217;ll happily apologize and set the record straight&#8212;but it doesn&#8217;t look like one to me.</p>
]]></content:encoded>
			<wfw:commentRss>http://cavlec.yarinareth.net/2007/02/22/elsevier-spams/feed/</wfw:commentRss>
		</item>
		<item>
		<title>The things I find out from referrers</title>
		<link>http://cavlec.yarinareth.net/2007/02/05/the-things-i-find-out-from-referrers/</link>
		<comments>http://cavlec.yarinareth.net/2007/02/05/the-things-i-find-out-from-referrers/#comments</comments>
		<pubDate>Mon, 05 Feb 2007 22:29:39 +0000</pubDate>
		<dc:creator>Dorothea</dc:creator>
		
		<category><![CDATA[Metablogging]]></category>

		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">http://cavlec.yarinareth.net/archives/2007/02/05/the-things-i-find-out-from-referrers/</guid>
		<description><![CDATA[I sing opera. Who knew?
(I don&#8217;t. I do have the stereotyped opera-singer physique, but I still don&#8217;t, and everyone should be very very glad I don&#8217;t because I would be excruciatingly bad at it. I sing choral music, sacred and secular. Trust me, it&#8217;s not the same thing at all.)
I&#8217;m not a publisher, either, and [...]]]></description>
			<content:encoded><![CDATA[<p>I <a href="http://galadriel.staff.vuw.ac.nz/e-coursebooks/2007%20Trimester%201/INFO_525_07_T1/modules/module05/notes.html">sing opera</a>. Who knew?</p>
<p>(I don&#8217;t. I do have the stereotyped opera-singer physique, but I still don&#8217;t, and everyone should be <em>very very glad</em> I don&#8217;t because I would be excruciatingly bad at it. I sing choral music, sacred and secular. Trust me, it&#8217;s not the same thing <em>at all</em>.)</p>
<p>I&#8217;m <a href="http://homepage.mac.com/engber//growinggreatcharacters/">not a publisher, either</a>, and I really wonder about someone who would publish a piece of writing in an outlet whose title translates &#8220;Reader beware.&#8221; (Sure, I wonder about myself. Often.) I don&#8217;t know who the owner of that site is, I&#8217;ve never seen a word of her writing save for what&#8217;s on that site, and I certainly <em>never</em> promised publication of any sort, here or anywhere else.</p>
<p>Anyway, I noticed these because of <a href="http://unknowngenius.com/blog/wordpress/ref-karma/">Referrer Karma</a>, which I have running on CavLec. I give it a qualified endorsement; its chief problem is that it can and does bar people who click on links in their webmail. If you&#8217;ve got a bad referrer spam problem, though, I&#8217;d call webmailers acceptable collateral damage and install it.</p>
]]></content:encoded>
			<wfw:commentRss>http://cavlec.yarinareth.net/2007/02/05/the-things-i-find-out-from-referrers/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Minor and possibly uninteresting tidbit</title>
		<link>http://cavlec.yarinareth.net/2005/01/30/minor-and-possibly-uninteresting-tidbit/</link>
		<comments>http://cavlec.yarinareth.net/2005/01/30/minor-and-possibly-uninteresting-tidbit/#comments</comments>
		<pubDate>Mon, 31 Jan 2005 02:13:02 +0000</pubDate>
		<dc:creator>Dorothea</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">/?p=2138</guid>
		<description><![CDATA[Our friends the Bulgarian referrer spammers have apparently figured out they&#8217;re being blocked. They&#8217;re clearly not sure why, so they&#8217;re experimenting.
What they&#8217;re experimenting with at the moment is breaking apart my tidy URLs and adding them as parameters after a question-mark, as in a typical search string or PHP-based URL.
It&#8217;s not working for them, but [...]]]></description>
			<content:encoded><![CDATA[<p>Our friends the Bulgarian referrer spammers have apparently figured out they&#8217;re being blocked. They&#8217;re clearly not sure why, so they&#8217;re experimenting.</p>
<p>What they&#8217;re experimenting with at the moment is breaking apart my tidy URLs and adding them as parameters after a question-mark, as in a typical search string or PHP-based URL.</p>
<p>It&#8217;s not working for them, but it&#8217;s a cute tactic. There&#8217;s probably a way to block based on it, but I&#8217;m too lazy to work it out, given that I derive no immediate benefit from it.</p>
<p><b>Correction</b>: Nope, nope, nope, that&#8217;s not what&#8217;s happening. What&#8217;s actually happening is that the 301 redirect I&#8217;ve got for them sends back the PHP URL, which the bot tries to fetch, only now the referrer is my site, so the bot tries to 301 over to <em>that</em>, and so on and so forth. Cute. Almost honeypottish.</p>
<p>But I don&#8217;t really have the bandwidth to spare for these schmucks, so I&#8217;ve gone back to 403ing them. You may wish to do the same.</p>
]]></content:encoded>
			<wfw:commentRss>http://cavlec.yarinareth.net/2005/01/30/minor-and-possibly-uninteresting-tidbit/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Go here, do this</title>
		<link>http://cavlec.yarinareth.net/2005/01/28/go-here-do-this/</link>
		<comments>http://cavlec.yarinareth.net/2005/01/28/go-here-do-this/#comments</comments>
		<pubDate>Fri, 28 Jan 2005 23:52:18 +0000</pubDate>
		<dc:creator>Dorothea</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">/?p=2136</guid>
		<description><![CDATA[An excellent block for our referrer-spamming friends here at CandyGenius. Dorothea-Bob says check it out.
(In brief: These guys have been leaving a telltale in their HTTP headers that this block uses to advantage.)
]]></description>
			<content:encoded><![CDATA[<p>An excellent block for our referrer-spamming friends <a href="http://www.candygenius.com/spampop">here at CandyGenius</a>. Dorothea-Bob says check it out.</p>
<p>(In brief: These guys have been leaving a telltale in their HTTP headers that this block uses to advantage.)</p>
]]></content:encoded>
			<wfw:commentRss>http://cavlec.yarinareth.net/2005/01/28/go-here-do-this/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Something else to block</title>
		<link>http://cavlec.yarinareth.net/2005/01/27/something-else-to-block/</link>
		<comments>http://cavlec.yarinareth.net/2005/01/27/something-else-to-block/#comments</comments>
		<pubDate>Fri, 28 Jan 2005 00:27:02 +0000</pubDate>
		<dc:creator>Dorothea</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">/?p=2134</guid>
		<description><![CDATA[Some good spam sleuthery suggests that &#8220;Fetch API Request&#8221; should be added to your list of bad user-agents, if you have one.
]]></description>
			<content:encoded><![CDATA[<p>Some good <a href="http://will.id.au/blog/archive/2004/10/06/dissecting-comment-spam">spam sleuthery</a> suggests that &#8220;Fetch API Request&#8221; should be added to your list of bad user-agents, if you have one.</p>
]]></content:encoded>
			<wfw:commentRss>http://cavlec.yarinareth.net/2005/01/27/something-else-to-block/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Curious indeed</title>
		<link>http://cavlec.yarinareth.net/2005/01/27/curious-indeed/</link>
		<comments>http://cavlec.yarinareth.net/2005/01/27/curious-indeed/#comments</comments>
		<pubDate>Thu, 27 Jan 2005 21:40:22 +0000</pubDate>
		<dc:creator>Dorothea</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">/?p=2132</guid>
		<description><![CDATA[Our friends the referrer spammers have quit referrer-spamming named domains, in favor of the IP 12.163.72.13. Which, when clicked upon, goes nowhere. Seems to be part of an AT&#38;T netblock, though I am not skilled in online sleuthery and could be wrong.
If you&#8217;re using the User-Agent trick, you&#8217;re still protected.
]]></description>
			<content:encoded><![CDATA[<p>Our friends the referrer spammers have quit referrer-spamming named domains, in favor of the IP 12.163.72.13. Which, when clicked upon, goes nowhere. Seems to be part of an AT&amp;T netblock, though I am not skilled in online sleuthery and could be wrong.</p>
<p>If you&#8217;re using the User-Agent trick, you&#8217;re still protected.</p>
]]></content:encoded>
			<wfw:commentRss>http://cavlec.yarinareth.net/2005/01/27/curious-indeed/feed/</wfw:commentRss>
		</item>
		<item>
		<title>For more information&#8230;</title>
		<link>http://cavlec.yarinareth.net/2005/01/20/for-more-information/</link>
		<comments>http://cavlec.yarinareth.net/2005/01/20/for-more-information/#comments</comments>
		<pubDate>Fri, 21 Jan 2005 00:58:51 +0000</pubDate>
		<dc:creator>Dorothea</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">/?p=2120</guid>
		<description><![CDATA[The bigshots are starting to pick up on the bandwidth-sucking referrer-spam jerkwads. I&#8217;m keeping up via Technorati; there&#8217;s far more out there than I can reasonably summarize.
Spam activity today: if you&#8217;ve got the User-Agent trick running, you&#8217;re still good. Plenty of new domain names in the referrers, so many that I think I&#8217;m going to [...]]]></description>
			<content:encoded><![CDATA[<p>The bigshots are starting to pick up on the bandwidth-sucking referrer-spam jerkwads. I&#8217;m <a href="http://www.technorati.com/cosmos/search.html?rank=&#038;url=referrer+spam">keeping up via Technorati</a>; there&#8217;s far more out there than I can reasonably summarize.</p>
<p>Spam activity today: if you&#8217;ve got the User-Agent trick running, you&#8217;re still good. Plenty of new domain names in the referrers, so many that I think I&#8217;m going to recommend that you install the User-Agent trick if you haven&#8217;t already.</p>
<p>Li, I don&#8217;t know what the heck is up with Spam Karma and your hacker. I&#8217;ll investigate tomorrow, promise.</p>
]]></content:encoded>
			<wfw:commentRss>http://cavlec.yarinareth.net/2005/01/20/for-more-information/feed/</wfw:commentRss>
		</item>
		<item>
		<title>New spam run</title>
		<link>http://cavlec.yarinareth.net/2005/01/18/new-spam-run/</link>
		<comments>http://cavlec.yarinareth.net/2005/01/18/new-spam-run/#comments</comments>
		<pubDate>Wed, 19 Jan 2005 03:08:09 +0000</pubDate>
		<dc:creator>Dorothea</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">/?p=2117</guid>
		<description><![CDATA[Details as usual at Ann Elisabeth&#8217;s. The User-Agent trick is still working; if you&#8217;re not using it, add
4u.info&#124;
to your bad-referrer list and you&#8217;ll be fine from what I&#8217;m seeing.
]]></description>
			<content:encoded><![CDATA[<p>Details as usual at <a href="http://www.annelisabeth.com/blog/archives/000191.html">Ann Elisabeth&#8217;s</a>. The User-Agent trick is still working; if you&#8217;re not using it, add</p>
<pre>4u.info|</pre>
<p>to your bad-referrer list and you&#8217;ll be fine from what I&#8217;m seeing.</p>
]]></content:encoded>
			<wfw:commentRss>http://cavlec.yarinareth.net/2005/01/18/new-spam-run/feed/</wfw:commentRss>
		</item>
		<item>
		<title>403 us this day our daily spam</title>
		<link>http://cavlec.yarinareth.net/2005/01/17/403-us-this-day-our-daily-spam/</link>
		<comments>http://cavlec.yarinareth.net/2005/01/17/403-us-this-day-our-daily-spam/#comments</comments>
		<pubDate>Tue, 18 Jan 2005 01:39:38 +0000</pubDate>
		<dc:creator>Dorothea</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">/?p=2114</guid>
		<description><![CDATA[Quiet spam day. The usual suspects are still at it, but if you&#8217;ve got either the User-Agent trick running or fidelityfunding in your bad-referrers list, you&#8217;re fine.
I got word from the developer of NewzCrawler that upcoming version 1.8 will fix the incessant-comment-feed-seeking problem. This is good. I shall ban 1.7 the instant 1.8 comes out.
]]></description>
			<content:encoded><![CDATA[<p>Quiet spam day. The usual suspects are still at it, but if you&#8217;ve got either the User-Agent trick running or fidelityfunding in your bad-referrers list, you&#8217;re fine.</p>
<p>I got word from the developer of NewzCrawler that upcoming version 1.8 will fix the incessant-comment-feed-seeking problem. This is good. I shall ban 1.7 the instant 1.8 comes out.</p>
]]></content:encoded>
			<wfw:commentRss>http://cavlec.yarinareth.net/2005/01/17/403-us-this-day-our-daily-spam/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Eat more 403!</title>
		<link>http://cavlec.yarinareth.net/2005/01/16/eat-more-403/</link>
		<comments>http://cavlec.yarinareth.net/2005/01/16/eat-more-403/#comments</comments>
		<pubDate>Sun, 16 Jan 2005 15:08:26 +0000</pubDate>
		<dc:creator>Dorothea</dc:creator>
		
		<category><![CDATA[Spam]]></category>

		<guid isPermaLink="false">/?p=2112</guid>
		<description><![CDATA[The LazyWeb is figuring out how to improve on my techniques, which is all to the good. Laurabelle has the latest; if you can help her with her current problem, please do (because I want the answer!).
She also has new additions to the list:
jmsimonr&#124;middlecay&#124;neweighweb&#124;targetindustries&#124;
zalaszentgrot&#124;zone-b51&#124;
To which I add:
hasslerenterprises&#124;bigyonet&#124;gargzdai&#124;1a1merchantaccounts&#124;
neweighweb&#124;darkangelclan&#124;mp-forum&#124;
The pattern appears to be a lull of something [...]]]></description>
			<content:encoded><![CDATA[<p>The LazyWeb is figuring out how to improve on my techniques, which is all to the good. <a href="http://www.niceperson.org/archive/2005/01/15/die_spammers_die.php">Laurabelle has the latest</a>; if you can help her with her current problem, please do (because I want the answer!).</p>
<p>She also has new additions to the list:</p>
<pre>jmsimonr|middlecay|neweighweb|targetindustries|
zalaszentgrot|zone-b51|</pre>
<p>To which I add:</p>
<pre>hasslerenterprises|bigyonet|gargzdai|1a1merchantaccounts|
neweighweb|darkangelclan|mp-forum|</pre>
<p>The pattern appears to be a lull of something like twelve to eighteen hours between a new attack of referrer spam with new domains. Is this a question of somebody losing access, or new instructions going out to the zombified PCs? I dunno.</p>
<p>By the way, I didn&#8217;t point this out last time, but it&#8217;s possible to turn the User-Agent trick into a 301 redirect as well. For the spammer above:</p>
<pre>SetEnvIfNoCase User-Agent ".*(compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)" BadReferrer=yes</pre>
<p>Nothing else need change, if you&#8217;ve already got a line denying bad referrers.</p>
<p>I am also within a week of banning NewzCrawler from CavLec altogether. The problem is that NewzCrawler incessantly looks for comment feeds on this site, despite their total nonexistence. I have 410ed and 403ed those feed URLs, but NewzCrawler totally refuses to get the hint&#8212;and worse, once it sees a post and surmises it should have a comment feed, it <em>never stops looking for it</em>. I have NewzCrawler users looking for comment feeds from every single post I&#8217;ve made since October 2004! This verges on DOSsy behavior.</p>
<p>The NewzCrawler developer is aware of this brokenness, as I&#8217;ve read a few different places, and he is also aware that server-log-aware bloggers don&#8217;t like it. His response has been &#8220;suck it up and deal; you don&#8217;t want to damage your readers just because they use my crap software, do you?&#8221;</p>
<p>Sorry, dude. I don&#8217;t want to punish them because of you, but I&#8217;m going to, because I don&#8217;t see any alternative given your attitude.</p>
<p>You NewzCrawler users? You have choices. You can figure out how to turn off the comment-feed-seeking, if NewzCrawler lets you do that. (If I see all those bogus hit-attempts disappear, I&#8217;ll call off the ban.) You can unsubscribe from CavLec. Or, if you still want to read CavLec, you can find a newsreader or aggregator that doesn&#8217;t suck. Totally up to you.</p>
<p>Otherwise, you&#8217;re gone a week from today. I&#8217;m serious. And you&#8217;ll continue to be gone until I see that NewzCrawler has a version out that fixes this bug, at which point I&#8217;ll allow the fixed version in.</p>
]]></content:encoded>
			<wfw:commentRss>http://cavlec.yarinareth.net/2005/01/16/eat-more-403/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
