<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Spam · I still don't have a title</title><link>https://oskuro.net/en/tags/spam/</link><description>Jordi's random rants</description><generator>Hugo</generator><language>en</language><copyright>© Jordi Mallach, CC-BY-SA 3.0</copyright><lastBuildDate>Fri, 11 Feb 2005 10:40:00 +0000</lastBuildDate><atom:link href="https://oskuro.net/en/tags/spam/index.xml" rel="self" type="application/rss+xml"/><item><title>A few suggestions to parasites</title><link>https://oskuro.net/en/posts/spammer-parasites/</link><pubDate>Fri, 11 Feb 2005 10:40:00 +0000</pubDate><guid>https://oskuro.net/en/posts/spammer-parasites/</guid><category>site</category><category>meta</category><category>pyblosxom</category><category>spam</category><description>&lt;p&gt;Dear assholes,&lt;/p&gt;
&lt;p&gt;If you plan to take advantage of my blog to rank your shitty pharmacy webpage high on Google, take the following into consideration:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;if you hit my poor Pentium 150 with hundreds of stupid HTTP requests to my blog, at least do it a few at a time during the day. Your referral stats pointing to your pharmacy shit will still show up (in the case that the blog stats are public, and in my case they aren&amp;rsquo;t), and you will not kill the box in about 15 minutes like you did 3 times in the last two days.&lt;/li&gt;
&lt;li&gt;if you kill my box, Google won&amp;rsquo;t be able to do its fine job and we&amp;rsquo;ll both lose.&lt;/li&gt;
&lt;li&gt;at least, point to an existing website.&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Thanks for considering a symbiotic relationship in the future.&lt;/p&gt;
&lt;p&gt;So the bastards did it again yesterday, and this time I had to drive to where the box is located and see what was going on in console. As expected, OOM killer fun, and by no means I could recover it, even after taking it off the network and trying to SysRQ it a bit.&lt;/p&gt;
&lt;p&gt;It seems the spammers are trying to take advantage of referral stats now, and hit sites with tons of requests. Every request to /blog in this site means a not so cheap python process which takes quite some memory, which is a scarce resource in poor &lt;code&gt;natura.oskuro.net&lt;/code&gt;. With just a few blog processes going on, the box starts swapping to its death.&lt;/p&gt;
&lt;p&gt;I know, I should add limits to my Apache2 configuration, and possibly pyblosxom caches. For now, stopping spamd has helped a bit, as that process only was sucking ~35% of the memory.&lt;/p&gt;</description></item><item><title>Blog spam: nothing new...</title><link>https://oskuro.net/en/posts/blog-spam2/</link><pubDate>Thu, 10 Jun 2004 14:52:00 +0000</pubDate><guid>https://oskuro.net/en/posts/blog-spam2/</guid><category>site</category><category>meta</category><category>pyblosxom</category><category>spam</category><description>&lt;p&gt;Thanks to all the people who replied to my &lt;a href="https://oskuro.net/en/posts/blog-spam"&gt;previous post&lt;/a&gt; on blog spam. It&amp;rsquo;s obviously not new, and it seems MT users have been hit quite &lt;a href="http://www.veazeys.com/cgi-bin/mt-comments.cgi?entry_id=88"&gt;badly&lt;/a&gt; by this. I guess removing links from comments is the first, quick step, but some kind of URL filter for the comment module in pyblosxom would be handy. Has anyone hacked something similar?&lt;/p&gt;
&lt;p&gt;Just an extension that lets you create a blacklist of URLs would be a start, as the spammer URLS are always the same. They do know about some anti-anti-spam techniques though, and for example write &amp;ldquo;online casino&amp;rdquo; as &amp;ldquo;on&amp;amp;#108;ine-cas&amp;amp;#105;no&amp;rdquo;, so to read links they should be rendered first.&lt;/p&gt;</description></item><item><title>Blog spam</title><link>https://oskuro.net/en/posts/blog-spam/</link><pubDate>Wed, 09 Jun 2004 16:54:00 +0000</pubDate><guid>https://oskuro.net/en/posts/blog-spam/</guid><category>site</category><category>meta</category><category>pyblosxom</category><category>spam</category><description>&lt;p&gt;The other day I found one comment in one of my blog&amp;rsquo;s posts which sounded weird. It said &amp;ldquo;HI, Wow.. this is a very informative website! I enjoy your site very much! Keep up the good work!&amp;rdquo; or similar. The author name linked to what looked like a pretty boring personal website. Yesterday I discovered most of my blog posts have one or more of these messages. What the fuck, they are spamming me through my blog! They basically write random nonsense like that, and add a link to an online-casino or whatever in the link you can leave as signature in pyblosxom.&lt;/p&gt;
&lt;p&gt;Has anyone else had problems like this in their blogs? If it continues, it&amp;rsquo;ll be easy to fix: I will just remove the comments module from my install and be done with it. Thanks to those who post useful stuff every now and then, though. It&amp;rsquo;s nice to read replies to some of my posts.&lt;/p&gt;</description></item></channel></rss>