Kevin Burton: Nasty New Trackback Spam. The main technique in this case exploits the fact that TypePad allows HTML in a place where it shouldn’t (an easy fix), but this caught my eye:
3. In the post URL they encode your permalink’s URL so that automated backlink trackers fail since now your URL appears on their site.
This might sound a bit confusing so I’ll show an example.
The trackback they submitted was:
http://foocom/foo.php?www.feedblog.org/2005/08/msn_filter_even.html
Then when you load this URL they automatically create a link to:
http://www.feedblog.org/2005/08/msn_filter_even.html
This is the first attack I’m aware of that specifically attempts to thwart backlink checkers like the Trackback Validator I helped with this past summer. When we started the project, we predicted that trackback spammers would either give up and go home (ha!) or they’d continue with the arms race and develop some kind of dynamic spam page in response.
There are a couple of reasons why I think this means that the spammers have essentially lost:
In a sense, these are the central goals of any anti-spam effort: to increase the costs to spammers, and to decrease the costs (in terms of time, PageRank, money, etc.) to recipients.
![[image]](http://mowser.com/img?url=http%3A%2F%2Fdsandler.org%2Fimages%2Ffeedtree-badge-atom.png)
![[image]](http://mowser.com/img?url=http%3A%2F%2Fdsandler.org%2Fimages%2Ffeedtree-badge-rss.png)


September 8th, 2007 at 11:36 am
financial-help.capitalfirmventure…
[…] far out site now comment this synopsis http://dsandler.org/wp/archives/2005/11/14/trackback-spammers-upping-the-ante and give comments […]…
dsandler.org ≡ Validator foiled! says:September 8th, 2007 at 2:32 pm
[…] Well, we were right and not right. I just received some TrackBack spam (probably not coincidentally, on a blog post about trackback spam) that fooled the Validator and yet can’t really be considered to be legitimate. […]