Trackback spam

Filed under: — 4:22 pm

Yesterday my wife and I dealt with a major trackback spam attack, and apparently we weren’t the only ones. Judging by the forum posts, this was a massive attack across at least hundreds of weblogs.

If you have a WordPress weblog, there’s a new plug-in that puts trackback pings into the moderation queue. Since trackbacks aren’t scanned by the built-in filtering system like comments, this is definitely needed. Most of us don’t get enough trackbacks to mind manually approving them.

Another possible solution is verifying the IP addresses of sites that send pings. This raises a couple of issues (such as sites like Blogger that might not ping from the same address as the weblog) but I think it’s worth pursuing.

One by one, the open, insecure systems of the past (email, weblog comments, trackback…) are being made useless by spammers. It’s going to be a messy place until a more secure alternative emerges.

3 responses to “Trackback spam”

  1. Nick says:

    I found a problem and fix for the plug-in (specifically the trackback one). I’ve updated the download with some new instructions.

  2. Marc says:

    Tell me about it.. I hate these spammers. Thanks for the link

  3. Trackback SPAM I had to get rid of trackbacks due to a recent proliferation of trackback spam. I only had a few…

(c) 2001-2007 Michael Moncur. All rights reserved, but feel free to quote me.
Powered by WordPress