the voice of reason

It’s a really damned scary place, where I’m the one speaking calmly and acting as the voice of reason. It’s happened rather more frequently than I’m comfortable with lately, both online and off.

I don’t know if it’s “the economy”, or the shorter days, or something else, but some people seem to have collectively lost their sense of rationality and humour.

Halloween 2007 - 7If you read a post by someone online, don’t jump immediately to paint them as EVIL! if they’re saying something you don’t like or agree with. Take some time. Maybe only a few seconds. Breathe. Try to imagine what’s going on from the other person’s perspective. Do they have valid reasons for saying what they’re saying? Could they really be doing the right thing, but you perceive it as EVIL! because you don’t have all of the facts? Could they really be intending to say something else, but are being misinterpreted due to a language or context gap?

The first step toward effective communication isn’t kneejerk reactionism. It isn’t polarizing pigeonholing. It’s trying to figure out what the other person (or people) are REALLY saying, and why. Then, and ONLY then, is a productive response even possible.

I’ve seen this kind of reactionary kneejerk evilcasting so many times. Usually, it’s Apple (and Jobs) cast as EVIL! because of DRM or something else (but, seriously, HDCP in the new MacBooks? WTF? It’s really tempting to cast THAT as EVIL! but again, I don’t have all of the facts…)

But now it seems as though the kneejerkism is spreading, and it’s not productive. It’s harmful. It’s corrosive.

We all just need to chill the hell out. Breathe. Think before reacting.

Sustained Wiki Spam Attack

wiki.ucalgary.ca has been under a sustained spam attack all day. What started out as a minor irritation has grown into something that is impossible to ignore. The spammer is somehow getting around both Bad Behavior and Spam Blacklist extensions (I’ve blacklisted their URLs, but they keep getting edits into the system). This is one of the more frustrating aspects of trying to do things in an open manner. If there is the slightest possibility that something will be subverted for spamilicious purposes, it will be. And most likely it will happen before more than a handful of legitimate users are able to take advantage of a service.

These cretins are being rather clever (or, they’ve gotten some good Script Kiddie l337 tools) because they’re coming from many different (and changing) IP addresses, and each edit is accompanied by its very own account creation. So I can’t just block IPs, or roll back all edits by a user. So, I’ve had to disable account creation for now until I can figure out wtf to do about this.

To the spammer(s): may you rot in the most insidious inner circle of hell, reserved for parasites like yourself who find it necessary to suck energy and resources from (otherwise) free and open educational resources.

wiki.ucalgary.ca has been under a sustained spam attack all day. What started out as a minor irritation has grown into something that is impossible to ignore. The spammer is somehow getting around both Bad Behavior and Spam Blacklist extensions (I’ve blacklisted their URLs, but they keep getting edits into the system). This is one of the more frustrating aspects of trying to do things in an open manner. If there is the slightest possibility that something will be subverted for spamilicious purposes, it will be. And most likely it will happen before more than a handful of legitimate users are able to take advantage of a service.

These cretins are being rather clever (or, they’ve gotten some good Script Kiddie l337 tools) because they’re coming from many different (and changing) IP addresses, and each edit is accompanied by its very own account creation. So I can’t just block IPs, or roll back all edits by a user. So, I’ve had to disable account creation for now until I can figure out wtf to do about this.

To the spammer(s): may you rot in the most insidious inner circle of hell, reserved for parasites like yourself who find it necessary to suck energy and resources from (otherwise) free and open educational resources.

Yet Another Wiki Spam Attack

Over the weekend, wiki.ucalgary.ca got hammered by a(n apparently) coordinated and distributed spam barrage. Hundreds of pages hit, new pages created, talk namespaces crapped into, etc…

I think I saw part of it happen in “real time” – I was watching a movie with Evan, with my Powerbook plugged into our TV (the only DVD player in the house), and every now and then I heard the system beep. After the movie ended, I saw the Watchmouse monitoring page for wiki.ucalgary.ca saying there was trouble connecting, and the main wiki.ucalgary.ca page was showing a MySQL connection error. Reloading the page made it go away, so I didn’t pay much attention.

Paul and I just spent the better part of an hour going through the wiki and delousing it, and I sure hope we didn’t inadvertently nuke a “real” edit, or spank a “real” user. The last thing I want is collateral damage in this silly battle against spammers.

I just can’t put into words how frustrating this is – we run a service for the use of the University community, to enhance the practice of teaching and learning online – and spammers run repeated drive-by-shootings spraying their crap all over it. It’s not just simple vandalism, though. It diminishes trust in the resource – why would a prof put stuff in it, if they can’t protect it from spam?

There has got to be a better solution to protecting a wiki from spam. I’ve got the Spam Blacklist extension for Mediawiki installed (and keep adding my own regex patterns, and periodically grabbing the blacklist from meta.wikimedia.org) – but that only helps protect against known spammers. I’ll be adding Bad Behavior (thanks to Paul for the link) to see if that helps.

Is there a tool available to go into a wiki and nuke any spam it finds? If spam keeps getting through the filters, there should be a way to yank it out again…

Over the weekend, wiki.ucalgary.ca got hammered by a(n apparently) coordinated and distributed spam barrage. Hundreds of pages hit, new pages created, talk namespaces crapped into, etc…

I think I saw part of it happen in “real time” – I was watching a movie with Evan, with my Powerbook plugged into our TV (the only DVD player in the house), and every now and then I heard the system beep. After the movie ended, I saw the Watchmouse monitoring page for wiki.ucalgary.ca saying there was trouble connecting, and the main wiki.ucalgary.ca page was showing a MySQL connection error. Reloading the page made it go away, so I didn’t pay much attention.

Paul and I just spent the better part of an hour going through the wiki and delousing it, and I sure hope we didn’t inadvertently nuke a “real” edit, or spank a “real” user. The last thing I want is collateral damage in this silly battle against spammers.

I just can’t put into words how frustrating this is – we run a service for the use of the University community, to enhance the practice of teaching and learning online – and spammers run repeated drive-by-shootings spraying their crap all over it. It’s not just simple vandalism, though. It diminishes trust in the resource – why would a prof put stuff in it, if they can’t protect it from spam?

There has got to be a better solution to protecting a wiki from spam. I’ve got the Spam Blacklist extension for Mediawiki installed (and keep adding my own regex patterns, and periodically grabbing the blacklist from meta.wikimedia.org) – but that only helps protect against known spammers. I’ll be adding Bad Behavior (thanks to Paul for the link) to see if that helps.

Is there a tool available to go into a wiki and nuke any spam it finds? If spam keeps getting through the filters, there should be a way to yank it out again…

Travel ranting

This is the one where I rant/vent about my flight down. I’m blogging this from 30,000′ for therapeutic reasons… It wasn’t a bad trip down at all, and I’m seriously not complaining about being sent to San Francisco for a couple of days of meetings, but man some people are just ignorant enough to deserve a full-fledged ranting…

This is the one where I rant/vent about my flight down. I’m blogging this from 30,000′ for therapeutic reasons… It wasn’t a bad trip down at all, and I’m seriously not complaining about being sent to San Francisco for a couple of days of meetings, but man some people are just ignorant enough to deserve a full-fledged ranting…

OK. I wake up at 3:20am – alarm’s set for 4 – and realize with a shudder that it’s only 2:20am Pacific time, but I can’t sleep the morning I have to fly anywhere. Get ready, sneak into Evan’s room to say goodbye while he sleeps, and then head downstairs to catch the cab at 5am. I arrive at the airport at about 5:20. Through checkin in about 5 minutes, then into the lineup for US Customs. It’s moving smoothly, and I’m through in about 20 minutes. I head for the lineup for the security check, and notice people starting to shove. They’re trying to follow the flight crews through the expedited lines, and they’re trying to shove their way through the remaining lines.

One very sweaty nervous little man nudges his way behind me, and quietly asks “do you mind if I ask you when your flight is? mine’s at 6:30”. I tell him mine is at 7:something, and there’s lots of time to get through security, that it won’t take any more than 15 minutes (it’s 5:55 when he asks). I decide to be an asshole (it happens occasionally). He’s got lots of time, and he’ll be through with 15-20 minutes to catch his plane if he waits patiently with the rest of us, so there’s no real emergency – just his sense of sweaty panic because he’s a moron in a suit, who can’t tell time or refuses to plan ahead. He decides he doesn’t like waiting, so makes a fuss with the agents, and is promptly rushed through the line, ahead of people that got there early enough to wait in line. Other people in line chuckle that he must have a very important meeting to be so nervous about missing it. I’d be a bit more nervous if he was running a company I was involved with – pretty obvious lack of planning skills.

10 minutes later (say, 6:05), and I’m third in line, starting to prepare my stuff to go through the X-Ray screener. A big Texan in coveralls, carrying a big duffel bag, marches through the line, to the staff side of the security checkin counter. I half expect him to open up with a hearty “WaHOO!” and pull out his dual six-shooters, all Looney Toons style. Instead, he blurts out “My flight to Dallas is at 6:30. I can’t wait in line. I need to get to my flight now!” The agent calmly replies “Well, sir, it’s not up to me. You’ll have to ask the people in line [gestures to the ~150 people in the waiting area] – maybe they’ll let you move up.” Several people in line calmly mention they’re on the same flight, but they don’t rush to the front because they know there’s lots of time left.

Texas turns to the person who’s next in line, and asks if he can join him through the security checkin. And then proceeds to remove the rope barricade so he can muscle his way into line. He then turns to us and says “This is my first time doing this – I’ve never gone through it before” – uh, Texas? how the f#ck did you get here in the first place? You’re talking with a Texas drawl, wearing a hat that says “Freer Texas” and are pretty obviously Not From Here, but you somehow managed to get up here with all of your crap without traveling by plane? And didn’t bother to pay attention when you’re told to show up at the airport 2-3 hours ahead of boarding time to deal with your own country’s security protocols? And have no problem muscling your way into line, acting like an ignorant buffoon, and making ~150 people wait while you throw a little tantrum to get your way?

Obviously, rules and lineups are for suckers. Only losers wait in line, and plan ahead.

Finally, I’m through, and find my way to gate 31 – it’s hidden in the new area – and relax in the waiting area. Lots of time. They start boarding, asking us repeatedly to board by sections (I’m in section 4, the last to board). When they call my section, I happen to be the second person to come forward. I get through to my seat, and find a woman already sprawled out in the window seat next to mine. Her coat is draped over her, as well as my seat, and she’s pretending to sleep. She must be tired. Maybe she got up early this morning. That would be rough. Oh, wait. Every single person on this plane got up early. I initially attempt to find another seat so she can continue her sprawl undisturbed, but decide that I could really use the extra leg room the exit seat provides (not to mention dual seat trays – one in front, and one in the armrest).

We take off after a short delay, and I get to see an absolutely amazing sunrise a few minutes after takeoff, once we rise above the cloud cover. It’s overcast the whole way to California, but fluffy cloud-tops are cool, so that’s fine with me. There are some pretty spectacular cloud formations off in the distance for most of the flight, with funky shadows being cast all over by the rising sun.

Sprawling Neighbor Lady eventually falls asleep for real, and repeatedly pours her bulk over into my seat. It’s fun editing XML files with a 50lb arm pinning your left arm to the armrest. I subtly nudge her a couple of times. No movement. I softly tuck her coat sleeve back over her so it’s not flapping on my keyboard. I cough, hoping the slight jarring might send a hint that she’s not exactly confining herself within one seat, and she’s not alone on the plane. She eventually takes a hint, and if I lean a bit to the right, and fold my left arm thusly, I can sort of simulate having enough elbow room to edit the 1431 xml files for the Mavericks website that I need to FTP back ASAP after landing (it launches officially tomorrow, so they need time to put it on their server). Actually, I get the files edited in record time thanks to the Glorious Wonder of BBEdit. Love it.

I finally give up on getting comfortable, and fire up Team America: World Police in iTunes. Might as well relax a bit 🙂

Wiki spamroaches

They sure are persistent little buggers. I think I’ve reverted about 50 pages of wiki spam in the last week, on 2 wikis. The little cretins just won’t take a clue. They’re just smart enough to be able to switch or spoof IP addresses to get around the blocks and bans, but not quite smart enough to realize that I won’t let them win.

And, looking at my Referrer Karma blacklist, there are spamroach URLs in there that make even me blush. I mean, these people have nothing better to do than to register dozens/hundreds of obsene URLs, then feed them into their little script kiddie auto-blog-spammer software and see if they can scrape some Google Juice out of it.

Sorry, punks. Not on my watch.

I do get the sinking feeling that the wikis that I babysit will eventually act as some form of “deadman’s switch” – I picture myself in my 90’s, on my deathbed, worried about the spam that is about to infiltrate the online resources that I’d been stewarding…

There has got to be a better solution to the wiki spamroach problem than manual labour – that doesn’t scale, and the spamroaches know this. They are armed with better weapons, and are only refining their tools and techniques. We just keep plugging more fingers into more holes, hoping to stop the coming flood of spam (ew – that’s a nasty mental image… a river of that icky gelatinous goo…).

WordPress seems to have the spam problem nailed down pretty solidly – I have to exert almost no effort to keep spam from my blog. The little effort I do direct at it is in approving the occasional comment that gets popped into moderation rather than correctly passing or failing the spam tests. Why can’t wiki software be that intelligent about nuking spam?

Update: a quick google turned up these links:

Update 2: Installed the SpamBlacklist extension for MediaWiki. They really left the process scary for non-geeks. Having to download the files individually from the webcvs repository, rather than just providing a nice .zip download, and not having the files configured to work “out of the box”. Regardless, it was a simple installation, and it’s now (hopefully) stopping spammers dead in their tracks. Or, at least slowing them down enough to piss them off enough to move somewhere else.

Spam Karma2 Rocks

Spam Karma 2 just keeps on chugging away, protecting my blog from the scum sucking spam roaches of the world. The roaches are getting marginally more intelligent – starting to try to game the spam blockers.

In the wee hours of the morning, some spammer from somewhere in Asia tried to get onto some kind of whitelist by posting a couple of innocuous comments – with no bad links or scary words. Those 2 comments got through, and then they immediately tried to dump spam into the blog. Those comments were automatically killed by Spam Karma 2. It was able to make a distinction from harmless (although pointless) comments from link spam-infested roach fodder.

All I had to do this morning was manually moderate the first two whitelist attempt comments as spam, which took a grand total of 5 seconds. I love Spam Karma 2! 🙂

Spam Karma 2 just keeps on chugging away, protecting my blog from the scum sucking spam roaches of the world. The roaches are getting marginally more intelligent – starting to try to game the spam blockers.

In the wee hours of the morning, some spammer from somewhere in Asia tried to get onto some kind of whitelist by posting a couple of innocuous comments – with no bad links or scary words. Those 2 comments got through, and then they immediately tried to dump spam into the blog. Those comments were automatically killed by Spam Karma 2. It was able to make a distinction from harmless (although pointless) comments from link spam-infested roach fodder.

All I had to do this morning was manually moderate the first two whitelist attempt comments as spam, which took a grand total of 5 seconds. I love Spam Karma 2! 🙂

Bandwidth “theft”

I just found a new site in my referrer stats – someone trying to customize Mambo to have a Kubrick-based theme rather strongly inspired by my (and Cole’s) tweaks to it. That’s cool. Have at’er.

But, it’s not cool to just go ahead and use the images directly off of my server. Sorry for being a jerk about it, but I don’t feel the need to use part of my bandwidth allocation so you don’t have to bother copying my files to your server to use them in your site… It’s simple to do. I’m all for people exploring and experimenting with stuff, even/especially with my stuff – that’s why it’s online – but please host your own website rather than sneaking into my hosting package.

Not sure how I feel about seeing my banner images elsewhere, either… I mean, they’re nothing special or anything, and I certainly haven’t protected or copyrighted them or anything, but really… Grab a camera, take a photo that means something to you and use that. It’ll take all of 5 minutes, and you’ll be much happier with your banner.

Of course, I’m also very stressed out with the neverending crush of a project that has been in perpetual panic mode for the last month, so I’m a little pissier than normal.

I just found a new site in my referrer stats – someone trying to customize Mambo to have a Kubrick-based theme rather strongly inspired by my (and Cole’s) tweaks to it. That’s cool. Have at’er.

But, it’s not cool to just go ahead and use the images directly off of my server. Sorry for being a jerk about it, but I don’t feel the need to use part of my bandwidth allocation so you don’t have to bother copying my files to your server to use them in your site… It’s simple to do. I’m all for people exploring and experimenting with stuff, even/especially with my stuff – that’s why it’s online – but please host your own website rather than sneaking into my hosting package.

Not sure how I feel about seeing my banner images elsewhere, either… I mean, they’re nothing special or anything, and I certainly haven’t protected or copyrighted them or anything, but really… Grab a camera, take a photo that means something to you and use that. It’ll take all of 5 minutes, and you’ll be much happier with your banner.

Of course, I’m also very stressed out with the neverending crush of a project that has been in perpetual panic mode for the last month, so I’m a little pissier than normal.

Scoble: Unsubscribed

I’ve been subscribing to Scoble‘s feed since shortly before NorthernVoice2005. He’s been an interesting source of info and opinion, but he’s also afflicted with a strong case of braggadocio regarding “secrets” that he’s privy to [1, 2, 3]. That pisses me off. If you know a “secret”, even just acknowledging that there is a secret is betraying that trust. Like it or not, Robert, when you signed on with MS, that was part of the deal. And you re-up every time you cash a cheque from Redmond.

The latest round of secret-bragging was related to the still-unreleased MSN Virtual Earth “google killer” – Robert was basically marking the secret as “his”, in a misguided attempt to generate buzz.

So, I checked out MSN Virtual Earth (it was up this morning, it’s down now – wonder why…), and it sucked badly. Maps wouldn’t completely load. I couldn’t zoom in more than three notches. The “Locate Me” button requested a FREAKING ACTIVEX CONTROL to do its job (and the non-ActiveX version failed to do anything). So, based on Robert’s pre-release pimping of Virtual Earth, I can only conclude that MSN Virtual Earth SUCKS BADLY and will be no challenge for Google to deal with.

See, Robert, that’s another reason why “secrets” are embargoed until a certain date – the software may not have been fully cooked before you started pimping it. But, the buggy steaming POS that I saw is how I’ll remember it.

I’ve been trying to call Scoble out on this, but it’s bouncing off… I left this as a comment on his blog:

…buzz is more than “I know a secret! neener neener! You’ll know too, on Monday!” Buzz is getting a community to give two shits about what you are evangelizing about. Playing the “my secret is bigger than yours, so I’m more important” game is kinda anti-buzz…

So, thanks to the wonders of RSS and blogosphere triangulation, I’ll still pick up anything important that Scoble talks about, without having the distraction of the lower signal:noise(brag) ratio.

I’ve been subscribing to Scoble‘s feed since shortly before NorthernVoice2005. He’s been an interesting source of info and opinion, but he’s also afflicted with a strong case of braggadocio regarding “secrets” that he’s privy to [1, 2, 3]. That pisses me off. If you know a “secret”, even just acknowledging that there is a secret is betraying that trust. Like it or not, Robert, when you signed on with MS, that was part of the deal. And you re-up every time you cash a cheque from Redmond.

The latest round of secret-bragging was related to the still-unreleased MSN Virtual Earth “google killer” – Robert was basically marking the secret as “his”, in a misguided attempt to generate buzz.

So, I checked out MSN Virtual Earth (it was up this morning, it’s down now – wonder why…), and it sucked badly. Maps wouldn’t completely load. I couldn’t zoom in more than three notches. The “Locate Me” button requested a FREAKING ACTIVEX CONTROL to do its job (and the non-ActiveX version failed to do anything). So, based on Robert’s pre-release pimping of Virtual Earth, I can only conclude that MSN Virtual Earth SUCKS BADLY and will be no challenge for Google to deal with.

See, Robert, that’s another reason why “secrets” are embargoed until a certain date – the software may not have been fully cooked before you started pimping it. But, the buggy steaming POS that I saw is how I’ll remember it.

I’ve been trying to call Scoble out on this, but it’s bouncing off… I left this as a comment on his blog:

…buzz is more than “I know a secret! neener neener! You’ll know too, on Monday!” Buzz is getting a community to give two shits about what you are evangelizing about. Playing the “my secret is bigger than yours, so I’m more important” game is kinda anti-buzz…

So, thanks to the wonders of RSS and blogosphere triangulation, I’ll still pick up anything important that Scoble talks about, without having the distraction of the lower signal:noise(brag) ratio.

Email Autoreply Considered Harmful

I intentionally refuse to set an email autoreply (those annoying “I’m out of the office, but your email is very important to me” messages that get spewed onto mailing lists).

Autorepliers are too dump to not spam lists, and I generally check email regardless of where I am, so it’s not like important messages get dropped. Sure, less important messages might get neglected, but that should be the rule rather than an exception…

The NMC list is a perfect example of this. Someone sends a message, and (especially during conference season) it’s immediately answered by a bunch of “I’m not here…” messages. Annoying. I get it. You’re out of the office. Your email shouldn’t care where you are…

ps. this post is the first one I’ve written using the fancy new WordPress Dashboard widget. It’s rather barebones at the moment, but the idea is pretty cool!

I intentionally refuse to set an email autoreply (those annoying “I’m out of the office, but your email is very important to me” messages that get spewed onto mailing lists).

Autorepliers are too dump to not spam lists, and I generally check email regardless of where I am, so it’s not like important messages get dropped. Sure, less important messages might get neglected, but that should be the rule rather than an exception…

The NMC list is a perfect example of this. Someone sends a message, and (especially during conference season) it’s immediately answered by a bunch of “I’m not here…” messages. Annoying. I get it. You’re out of the office. Your email shouldn’t care where you are…

ps. this post is the first one I’ve written using the fancy new WordPress Dashboard widget. It’s rather barebones at the moment, but the idea is pretty cool!

Open Letter to DeVry: STOP THE POPUPS!

I just got a couple of popup/popunders for DeVry Institute of Technology – despite the fact that I have a popup blocker installed and activated.

DeVry doesn’t provide contact information on their website (perhaps that’s a sign?), and this is really pissing me off. Do you people realize just what a shitty thing popunders are? They are almost as bad as Casino/Viagra/Texas-Holdem spam! You are diluting any reputation your institution may have had, and further negating the value your alumni may realize due to the crap you fling across the ‘net in a desparate attempt to gather new students.

DeVry: please stop polluting the internet with your insipid popunder ads. If I was a betting man, I’d wager the benefit to your organization is pretty minimal (most click-throughs will likely be accidental or inadvertent – meaning they cost you money with no benefit to you), and the negative spin it puts on DeVry is pretty darned big (just ask anyone who has ever been hit by your popunder ads – whatever your marketing/advertising drones are whispering into your ears is wrong).

These types of advertising techniques would be best suited for impulse buys – and a multi-year educational program is hardly an impulse buy. Work on building up the reputation of your organization, and raise awareness by participating in the community, not by polluting a medium with annoying and distracting advertising.

I can’t even imagine what the backlash from the faculty, staff, students, and alumni at the University of Calgary would be if they tried this crap – why is it OK for DeVry to do it? It’s not.

I just got a couple of popup/popunders for DeVry Institute of Technology – despite the fact that I have a popup blocker installed and activated.

DeVry doesn’t provide contact information on their website (perhaps that’s a sign?), and this is really pissing me off. Do you people realize just what a shitty thing popunders are? They are almost as bad as Casino/Viagra/Texas-Holdem spam! You are diluting any reputation your institution may have had, and further negating the value your alumni may realize due to the crap you fling across the ‘net in a desparate attempt to gather new students.

DeVry: please stop polluting the internet with your insipid popunder ads. If I was a betting man, I’d wager the benefit to your organization is pretty minimal (most click-throughs will likely be accidental or inadvertent – meaning they cost you money with no benefit to you), and the negative spin it puts on DeVry is pretty darned big (just ask anyone who has ever been hit by your popunder ads – whatever your marketing/advertising drones are whispering into your ears is wrong).

These types of advertising techniques would be best suited for impulse buys – and a multi-year educational program is hardly an impulse buy. Work on building up the reputation of your organization, and raise awareness by participating in the community, not by polluting a medium with annoying and distracting advertising.

I can’t even imagine what the backlash from the faculty, staff, students, and alumni at the University of Calgary would be if they tried this crap – why is it OK for DeVry to do it? It’s not.