Regarding The Recent Spam

Over this past weekend you may have noticed a slight increase in spam. This particular spam is being done by actual people not entirely violating our terms of service. Now that this has been brought to our attention, we are going to make the necessary changes to our terms of service and add a couple new layers of spam protection.

Which notifications are spam and which are not?

If you do receive an email notification with the following message it is being caught by our spam filters. This is good thing =)

NOTE: This message has been flagged as spam. You may respond with “Delete” to delete this message, “Approve” to approve this message, or “Spam” to mark this message as spam. You may also respond with your response to automatically approve the post and post your response at the same time.

If you receive a notification without the above message and feel that it is spam you have a couple of options:

  1. Mark the comment as spam
  2. Block the user
    • Visit: Account Permissions
    • Scroll down to Block Lists
    • Add the Username or IP Address of the user
  3. If it is consistent spam feel free to forward the full email notification to help@disqus.com

Giannii
DISQUS
Community Manager
giannii@disqus.com

View Comments

Giannii on February 2nd 2009 in disqus

  • wallace530
    great post sir..
    thanks for sharing. really helped a lot here.
    --------------------------------------------------
    Ugg Boots | Uggs
  • actually guys it depends..it depends to the administrator who accept the spamming message or to allow to help others..so for me it deference purpose guys..regards
  • actually guys it depends..it depends to the administrator who accept the spamming message or to allow to help others..so for me it deference purpose guys..regards
  • actually guys it depends..it depends to the administrator who accept the spamming message or to allow to help others..so for me it deference purpose guys..regards
  • Could you send me a couple of those full email notifications? I can take a
    look for you.
    Giannii
    DISQUS
    Community Manager
    giannii@disqus.com
    http://twitter.com/giannii
  • Today I am getting scores of spam. Tired of marking everything as spam :)
  • Today I am getting scores of spam. Tired of marking everything as spam :)
  • Could you send me a couple of those full email notifications? I can take a
    look for you.
    Giannii
    DISQUS
    Community Manager
    help@disqus.com
    http://twitter.com/giannii
  • Would be great to see Mollom as part of Disqus.
  • Would be great to see Mollom as part of Disqus.
  • Nice Topic. I just subscribe to your blog for future update.

    Can i link this post to my blog and copy a snippet?

    God bless and good luck!
  • Facebook User
    test #giannii
  • garjani
    Raivo Pommer
    raimo1@hot.ee

    EZB krise

    "Zu spät, zu zögerlich"

    Der DGB ging die EZB dagegen scharf an. "Sie reagiert zu spät und zu zögerlich auf die historische Wirtschaftskrise", sagte der Chefvolkswirt der Deutschen Gewerkschaftsbundes (DGB), Dierk Hirschel.




    "Sie hätte sich ein Beispiel an den angelsächsischen Banken nehmen und die Zinsen schnell und drastisch senken sollen." In den USA liegt der Leitzins nahe null Prozent.

    Vor der EZB hatte am Mittag bereits die Bank von England ihren Leitzins auf das historische Tief von 0,5 Prozent gekappt und den Ankauf von Staatsanleihen angekündigt um zusätzlich Milliarden in die Wirtschaft zu pumpen.
  • garjani
    Raivo Pommer
    raimo1@hot.ee

    EZB krise

    "Zu spät, zu zögerlich"

    Der DGB ging die EZB dagegen scharf an. "Sie reagiert zu spät und zu zögerlich auf die historische Wirtschaftskrise", sagte der Chefvolkswirt der Deutschen Gewerkschaftsbundes (DGB), Dierk Hirschel.




    "Sie hätte sich ein Beispiel an den angelsächsischen Banken nehmen und die Zinsen schnell und drastisch senken sollen." In den USA liegt der Leitzins nahe null Prozent.

    Vor der EZB hatte am Mittag bereits die Bank von England ihren Leitzins auf das historische Tief von 0,5 Prozent gekappt und den Ankauf von Staatsanleihen angekündigt um zusätzlich Milliarden in die Wirtschaft zu pumpen.
  • MarbleHost
    Divisive Cotton I have to agree with what you're saying. This wasn't against pligg at all. Sure they used pligg as a platform but I don't think it' was against pligg.

  • MarbleHost
    Divisive Cotton I have to agree with what you're saying. This wasn't against pligg at all. Sure they used pligg as a platform but I don't think it' was against pligg.

    Marble Host
  • MarbleHost
    Divisive Cotton I have to agree with what you're saying. This wasn't against pligg at all. Sure they used pligg as a platform but I don't think it' was against pligg.

    Marble Host
  • Rosie57
    Hi, I'm new here and I feel very good to know that there are spam filters being put in place. Also from what I have seen and read so far I know I'm going to like here. I'm in the right place.
  • Rosie57
    Hi, I'm new here and I feel very good to know that there are spam filters being put in place. Also from what I have seen and read so far I know I'm going to like here. I'm in the right place.
  • Rosie57
    Hi, I'm new here and I feel very good to know that there are spam filters being put in place. Also from what I have seen and read so far I know I'm going to like here. I'm in the right place.
  • Giannii,

    It's more then just the widget, it's WP not seeing what DISQUS marked as SPAM. Sent you email with details.
  • Giannii,

    It's more then just the widget, it's WP not seeing what DISQUS marked as SPAM. Sent you email with details.
  • Zoli,

    The recent comments widget refreshes every 15 minutes and that spam
    comment was most likely cached before you hit mark as spam. Which
    comment is it? If it is still lurking I will look into it.

    Giannii
    DISQUS
    Community Manager
    giannii@disqus.com
  • Zoli,

    The recent comments widget refreshes every 15 minutes and that spam
    comment was most likely cached before you hit mark as spam. Which
    comment is it? If it is still lurking I will look into it.

    Giannii
    DISQUS
    Community Manager
    giannii@disqus.com
  • Evan "MARK SPAM" manually does not work for me:

    - the spam comment is not displayed under the blog post - that's good
    - but it is still listed in the "recent comments" widget in my sidebar, which is really, really bad

    I'm also getting close to removing DISQUS :-(
  • Zoli,

    The recent comments widget refreshes every 15 minutes and that spam
    comment was most likely cached before you hit mark as spam. Which
    comment is it? If it is still lurking I will look into it.

    Giannii
    DISQUS
    Community Manager
    help@disqus.com
  • Giannii,

    It's more then just the widget, it's WP not seeing what DISQUS marked as SPAM. Sent you email with details.
  • Evan MARK SPAM manually does not work for me:

    - the spam comment is not displayed under the blog post - that's good
    - but it is still listed in the "recent comments" widget in my sidebar, which is really, really bad

    I'm also getting close to removing DISQUS :-(
  • The worst part of it is that these comment spammers are using registered "legit" Disqus accounts across multiple blogs and spamming the hell out of Disqus. If I flag a user, and you flag a user and someone else flags a user, then all of their respective comments should be removed as spam pending moderator approval. End of story.

    I've removed Disqus until this gets figured out and it really annoys me because there are so many reasons to like it, but I don't want my site plagued with spam, particularly spam that Akismet catches in one second.
  • Thanks Giannii - you guys have been really proactive in your outreach over this issue.

    That kind of transparency in a hosted service that is free is really excellent. Many thanks.
  • Count me in as someone who might not continue using Disqus if the spam filtering isn't beefed up. I'm being plauged by a compliment spammer called "sex toys" and even when I block this user, their comments still get through. C'mon!
  • The worst part of it is that these comment spammers are using registered "legit" Disqus accounts across multiple blogs and spamming the hell out of Disqus. If I flag a user, and you flag a user and someone else flags a user, then all of their respective comments should be removed as spam pending moderator approval. End of story.

    I've removed Disqus until this gets figured out and it really annoys me because there are so many reasons to like it, but I don't want my site plagued with spam, particularly spam that Akismet catches in one second.
  • Count me in as someone who might not continue using Disqus if the spam filtering isn't beefed up. I'm being plauged by a compliment spammer called "sex toys" and even when I block this user, their comments still get through. C'mon!
  • The worst part of it is that these comment spammers are using registered "legit" Disqus accounts across multiple blogs and spamming the hell out of Disqus. If I flag a user, and you flag a user and someone else flags a user, then all of their respective comments should be removed as spam pending moderator approval. End of story.

    I've removed Disqus until this gets figured out and it really annoys me because there are so many reasons to like it, but I don't want my site plagued with spam, particularly spam that Akismet catches in one second.
  • The worst part of it is that these comment spammers are using registered "legit" Disqus accounts across multiple blogs and spamming the hell out of Disqus. If I flag a user, and you flag a user and someone else flags a user, then all of their respective comments should be removed as spam pending moderator approval. End of story.

    I've removed Disqus until this gets figured out and it really annoys me because there are so many reasons to like it, but I don't want my site plagued with spam, particularly spam that Akismet catches in one second.
  • Count me in as someone who might not continue using Disqus if the spam filtering isn't beefed up. I'm being plauged by a compliment spammer called "sex toys" and even when I block this user, their comments still get through. C'mon!
  • Count me in as someone who might not continue using Disqus if the spam filtering isn't beefed up. I'm being plauged by a compliment spammer called "sex toys" and even when I block this user, their comments still get through. C'mon!
  • I didn't see any at that point, but I agree with Randy.

    It seems to be getting worse. It's not relevant, but it's usually a comment like "nice post good job"... no links, no hidden message or promotion...

    But it's still SPAM.

    --Kyle
  • I didn't see any at that point, but I agree with Randy.

    It seems to be getting worse. It's not relevant, but it's usually a comment like "nice post good job"... no links, no hidden message or promotion...

    But it's still SPAM.

    --Kyle
  • I'm with Vinny, here. I have absolutely loved using Disqus since I installed it, but if you can't figure out how to do something about the complement spam, I am going to go back to WP with Akismet protection. Don't believe the BS from the people posting below that it is a difficult line. They are probably complement spammers themselves.

    I don't care if I get those complements like "Great post, I'm adding you to my RSS" even from my regular readers. Watch for phrases like that, see if users are posting on more than one site in a day, watch to see if they are posting the same phrases on several blogs, give us better flagging tools that add up across the system to weed them out. Give us variable sign up that allow us as site owners to put stricter controls on how much info a comment needs before we allow it on our site. Allow us to whitelist members into our community. Allow us to only allow people to sign up via Facebook Connect, Google Friend Connect or some other trusted source to make sure these people are real. Or make Disqus the trusted source, but have a stricter sign up method that proves their identity. Don't allow a member to post a link until they have proven themselves with <n> number of real posts, i.e. figure out why they are posting and take away the incentive.

    The email controls are nice, but not if I am getting 20 or so complement spams in one setting. I know it won't be easy, but I am sure you guys can figure it out. I am looking forward to your solution because the future of your business depends upon you figuring out how to deal with this threat.</n>
  • I'm with Vinny, here. I have absolutely loved using Disqus since I installed it, but if you can't figure out how to do something about the complement spam, I am going to go back to WP with Akismet protection. Don't believe the BS from the people posting below that it is a difficult line. They are probably complement spammers themselves.

    I don't care if I get those complements like "Great post, I'm adding you to my RSS" even from my regular readers. Watch for phrases like that, see if users are posting on more than one site in a day, watch to see if they are posting the same phrases on several blogs, give us better flagging tools that add up across the system to weed them out. Give us variable sign up that allow us as site owners to put stricter controls on how much info a comment needs before we allow it on our site. Allow us to whitelist members into our community. Allow us to only allow people to sign up via Facebook Connect, Google Friend Connect or some other trusted source to make sure these people are real. Or make Disqus the trusted source, but have a stricter sign up method that proves their identity. Don't allow a member to post a link until they have proven themselves with <n> number of real posts, i.e. figure out why they are posting and take away the incentive.

    The email controls are nice, but not if I am getting 20 or so complement spams in one setting. I know it won't be easy, but I am sure you guys can figure it out. I am looking forward to your solution because the future of your business depends upon you figuring out how to deal with this threat.
  • The problem is that a lot of these users are just parading around and hitting multiple sites even with their Disqus logins. What Disqus needs is a way to flag users for review by Disqus this way if someone else catches a spammer, their comments move into the spam queue across the board. This is one benefit made possible by the fact that Disqus is cross-site.

    I'm seriously considering moving back to Wordpress' default comments simply because Disqus' comment spam feature is so anemic. It doesn't catch a lot and doesn't allow features you would expect from a networked system.
  • The problem is that a lot of these users are just parading around and hitting multiple sites even with their Disqus logins. What Disqus needs is a way to flag users for review by Disqus this way if someone else catches a spammer, their comments move into the spam queue across the board. This is one benefit made possible by the fact that Disqus is cross-site.

    I'm seriously considering moving back to Wordpress' default comments simply because Disqus' comment spam feature is so anemic. It doesn't catch a lot and doesn't allow features you would expect from a networked system.
  • The problem is that a lot of these users are just parading around and hitting multiple sites even with their Disqus logins. What Disqus needs is a way to flag users for review by Disqus this way if someone else catches a spammer, their comments move into the spam queue across the board. This is one benefit made possible by the fact that Disqus is cross-site.

    I'm seriously considering moving back to Wordpress' default comments simply because Disqus' comment spam feature is so anemic. It doesn't catch a lot and doesn't allow features you would expect from a networked system.
  • I actually get e-mail "This message has been flagged as spam." about my OWN comments. Not the most usefull thing ^^
  • I actually get e-mail "This message has been flagged as spam." about my OWN comments. Not the most usefull thing ^^
  • I actually get e-mail "This message has been flagged as spam." about my OWN comments. Not the most usefull thing ^^
  • Ok ... it only seems to be getting worse.
  • Ok ... it only seems to be getting worse.
  • I will definitely check it out and thanks for the suggestion.

    =)

    Giannii
    DISQUS
    Community Manager
    giannii@disqus.com
  • spamboy
    Help help
    this guy is stealing our personal domain data and needs to be stopped

    Atriks and Brian Haberstroh were major spammers (google them)
    The good news is his email business failed but his distributed network of PC’s which is under his other company www.greenhorse .com is still active
    Essentially Mr. Haberstroh has gone postal
    Here is the story
    First you must give credit to Atriks partner James Rascoe of Dunbarton NH he is the inventor of www.greenhorse.com and code writer extraordinaire his talents are routinely put to use in scraping corporate data from websites and bypassing spam filters. And has gone to great lengths to hide his association with Mr. Haberstroh although he owns 49% of Atriks.
    The facts are as follows
    In the process of sending spam for other companies Atriks would steal part of their clients data file which they would then use the file they created to send spam with the “tickerbar” software embedded in it, the unsuspecting recipient would then open and unknowingly download the “tickerbar” software which would then give Atriks the ability to control the user’s PC.
    As of 2008 they had aprox 5000 PC’s with the “tickerbar” software installed aprox half of which are unaware it is running on their system and the naïve users that knowingly downloaded the software do not receive any compensation
    Mr. Haberstroh through his other company www.domaincow.com convinced VeriSign the he is running DNS servers and therefore needs the “zone transfer file” this file identifies every .com and .net domain name registered.
    Upon receipt of the file he is able to select out every new .com and .net domain registered on a daily basis
    With a file of all new domain registrations in hand he then feeds the file into the www.greenhorse.com system the 5000 PC’s the PC’s then query the “whois” lookup on websites controlled by VeriSign
    www.whois.net

    Because the queries are coming from 5000 different IP addresses he is able to bypass basic security
    And obtain all of the “whois “ information (postal, telephone, email)
    The email addresses are sold to spam operations and the postal and telephone numbers are
    Provided to list brokers www.marketforcecorporation.com and www.infinite-media.com who then sell it to many large reputable corporations who are unaware of the source of the data filling our mailboxes with postal junk
    The bottom line is VeriSign is aware of Mr. Haberstroh and what he is doing and despite the agreement Mr. Haberstroh signed with VeriSign to receive the “zone transfer file” which specifically restricts any mass electronic queries of the “whois “ data base and the use of the data for marketing purposes. VeriSign chose not to suspend Mr. Haberstroh's access to the “zone transfer file” thereby permitting the wholesale theft of personal information.
    You may respond to this email with any questions
    Regards
  • Dries
    Have you looked into adding Mollom support to Disqus?
  • Would be great to see Mollom as part of Disqus.
  • I will definitely check it out and thanks for the suggestion.

    =)

    Giannii
    DISQUS
    Community Manager
    help@disqus.com
  • Dries
    Have you looked into adding Mollom support to Disqus?
  • Dries
    Have you looked into adding Mollom support to Disqus?
  • Thank you.
  • Thanks for the quick response and tweak, Giannii!

    There's a slippery slope between comments and comment spam, but intent is what matters. If someone leaves a comment saying "I love your site and will add it to my rss feed", they might be actual fans, or they might be SEO page rank harvesters, looking to coast along on your hard-earned status. It's up to all of us to decide which bin to put them in!

    I've noticed that many of these comments are verbatim copies of each other, though, and I'll sometimes get the same comment from the same "person" on multiple posts. Now that's definitely spam!
  • Thank you.
  • I was wondering ... it was starting to irritate me. Thanks for addressing the issue.
  • Ok ... it only seems to be getting worse.
  • Thanks for the quick response and tweak, Giannii!

    There's a slippery slope between comments and comment spam, but intent is what matters. If someone leaves a comment saying "I love your site and will add it to my rss feed", they might be actual fans, or they might be SEO page rank harvesters, looking to coast along on your hard-earned status. It's up to all of us to decide which bin to put them in!

    I've noticed that many of these comments are verbatim copies of each other, though, and I'll sometimes get the same comment from the same "person" on multiple posts. Now that's definitely spam!
  • I was wondering ... it was starting to irritate me. Thanks for addressing the issue.
  • Excellent!
  • Excellent!
  • Excellent!
blog comments powered by Disqus