Archive for the 'Web Design' Category

This guy will ask spammers to stop spamming you in exchange for links!

The beauty just came into my blog’s spam filter this morning:

Name: Anikrichard | E-mail: | URI: *spamlink* | IP: 72.9.235.218 | Date: September 5, 2007

hello , my name is Richard and I know you get a lot of spammy comments ,
I can help you with this problem . I know a lot of spammers and I will ask them not to post on your site. It will reduce the volume of spam by 30-50% .In return Id like to ask you to put a link to my site on the index page of your site. The link will be small and your visitors will hardly notice it , its just done for higher rankings in search engines. Contact me icq or write me , i will give you my site url and you will give me yours if you are interested. thank you

This is one of the more appealing spam emails I’ve seen - in return for him doing you a favour, and asking the nasty spammers to stop, all he wants is a link to his site.

I don’t have the time myself, but someone should talk to this guy and get his URL to ‘add a link’, then send him off the the Google Webspam team. Would be fun to see what happens. If anyone wants to take it on, let me know - I would love to see how it turns out / how quickly the guy is banned.

Need Keyword Tool Suggestions, Preferably with an API

I am in the process of preparing to scale an SEO tool I have prototyped to make available to the public. However, I need to find a decent keyword tool to use in a script, something that:

  • Returns a list of related keywords based upon the keyword I specify
  • Can be banged on repeatedly by a script
  • Preferably returns estimated search volumes as well

Cost is not a huge factor, although the cheaper, the better. Also, if it has a decent API, so much the better. If there isn’t one that you know of that gets the search volumes, what would you recommend to obtain those? Do any of the major search engines provide search volume data?

If worse comes to worse, I could code my own. However, I would much prefer to save time!

In the era of Web2.0, we are seeing the advent of AJAX technologies to drive web pages and applications. Which is good, for the most part - AJAX is a great tool. AJAX-powered pages and applications are often quicker and more responsive than their predecessors, since they don’t require full page loads for every possible operation, opting instead to reload and refresh only those parts of a page necessary.

On the flip side, AJAX can cause problems for search engines. Since the browser does not necessarily move to a new URL to display new data, much of the data and text content on an AJAX-powered site may not be accessible to search engines. Search engines will not submit forms or otherwise interact with the AJAX-powered sections of a site to cause page updates to be triggered, causing much of the content of an AJAX-powered site to be missed.

This is an issue for SEOs everywhere - as AJAX becomes more prevalent, client demand for this technology will continue to increase. So how do we deal with AJAX from an SEO perspective?

Rich McIver of SoftwareDeveloper.com emailed me yesterday to inform me of their latest feature article entitled, ‘‘. The article goes into some detail over techniques and best practices to help make your AJAX application search engine friendly. Some of the information is pretty standard (’submit a sitemap containing static copies of the fragments returned through AJAX’), while some of it deals with the problem at a more design / technical level, such as a presentation on ‘Hijax’ model of AJAX web design.

The article also goes into some common ways of handling AJAX for SEO purposes, and shows the shortcomings of these approaches.

How have you handled AJAX in your web pages / applications? Anything you would add beyond what the linked articles suggest?

Dreamhost leaks 3,500 FTP passwords

**** Update: After all this Dreamhost mess, I’ve decided to abandon ship and go to Lighthouse Technologies for hosting, since I know the owner, and can vouch that he is solid. His best plan is $16 / mo, but bound to be more reliable and secure. If you want to get hosting with Lighthouse, please consider using my affiliate link! ****

I just recieved this email from Dreamhost. It seems that they’ve leaked 3500 FTP account passwords somehow.

That explains a lot - about 2 weeks ago, someone used my password to upload tons of spam links to my sites. At the time, I contacted Dreamhost indicating the problem, and they assured me that their servers were secure, and it *must* be my problem. Looks like it wan’t me.

From: DreamHost Security Team
Subject: URGENT: FTP Account Security Concerns…

Hello -

This email is regarding a potential security concern related to your
‘XXXX’ FTP account.

We have detected what appears to be the exploit of a number of
accounts belonging to DreamHost customers, and it appears that your
account was one of those affected.

We’re still working to determine how this occurred, but it appears
that a 3rd party found a way to obtain the password information
associated with approximately 3,500 separate FTP accounts and has
used that information to append data to the index files of customer
sites using automated scripts (primarily for search engine
optimization purposes).

Our records indicate that only roughly 20% of the accounts accessed -
less than 0.15% of the total accounts that we host - actually had
any changes made to them. Most accounts were untouched.

We ask that you do the following as soon as possible:

1. Immediately change your FTP password, as well as that of any other
accounts that may share the same password. We recommend the use of
passwords containing 8 or more random letters and numbers. You may
change your FTP password from the web panel (”Users” section, “Manage
Users” sub-section).

2. Review your hosted accounts/sites and ensure that nothing has been
uploaded or changed that you did not do yourself. Many of the
unauthorized logins did not result in changes at all (the intruder
logged in, obtained a directory listing and quickly logged back out)
but to be sure you should carefully review the full contents of your
account.

Again, only about 20% of the exploited accounts showed any
modifications, and of those the only known changes have been to site
index documents (ie. ‘index.php’, ‘index.html’, etc - though we
recommend looking for other changes as well).

It appears that the same intruder also attempted to gain direct
access to our internal customer information database, but this was
thwarted by protections we have in place to prevent such access.
Similarly, we have seen no indication that the intruder accessed
other customer account services such as email or MySQL databases.

In the last 24 hours we have made numerous significant behind-the-
scenes changes to improve internal security, including the discovery
and patching to prevent a handful of possible exploits.

We will, of course, continue to investigate the source of this
particular security breach and keep customers apprised of what we
find. Once we learn more, we will be sure to post updates as they
become available to our status weblog:

http://www.dreamhoststatus.com/

Thank you for your patience. If you have any questions or concerns,
please let us know.

Increasing the Profile of the SEO Industry

A recent post at SEOmoz once again brought up consider the plight of the Search Engine Optimization industry; as effective and needed as SEO consultants are, blackhats and webspammers have given the industry a black eye.

People see the search community in two camps: Search Engines (good) and Spammers/SEOs (bad). The way they see it, the search engines work diligently to reduce spam, and show the most relevant results for their queries. On the other side of town you have the SEOs and spammers, who try to make sites rank for their own ends, therefore throwing off the good, pristine search engine results.

What the public needs to realize is that real SEO isn’t about making pillspam or other useless garbage rank - SEO is about ensuring that relevant content ranks in the SERPS for related queries. For most site owners, there is little or no value in ranking for non-relevant queries. Often, the pursuit of rankings by SEOs forces them to review the content, make it more relevant and of better quality to induce links, and all around creates better websites and an overall better user experience on the Internet.

I think the SEO community needs to reach out to the public in some way to raise our profile in the public eye, differentiating ourselves from the communities of webspammers and other devious characters. We need to present ourselves as a legitimate, valuable industry. I think that we are on the right track as far as it goes, but more has to be done.

Does anyone have any suggestions how to better clean up the SEO image? I would appreciate your thoughts.

.cm Registry Redirection Mystery Solved

A while back, I first commented on the fact that the entire .cm (Cameroon) TLD appears to be redirected to the Agoga.com parking page in my post ‘Typo Squatter loses Thousands of Dollars Due to Missed Details‘. This post generated tons of interest and comments, and a large amount of search traffic.

The move by the government of Cameroon has become an ongoing mystery for many domainers - few could fail to see the benefitsof owning the .cm registry. Think of the profits - any time you mistyped ‘.com’ as ‘.cm’, you went to an ad-driven parking page. It is estimated that millions of people make this sort of error every day, leading to hundreds of thousands of dollars of ad revenue daily. In essence, whoever redirected the .cm registry pulled off the perfect coup of the domaining world.

Well, the mystery is finally solved. According to a recent article on CNN, the mastermind behind the .cm switch is Kevin Ham, domainer extrordinaire with an estimated net worth of $300 million dollars. According to the CNN article, Ham sent a group of his employees flying to the nation of Cameroon to convince the government-run registry the value of landing-page redirection. Ham splits his profits off this scheme with the government of Cameroon.

According to sources, he is also eyeing Colombia (.co), Oman (.om), Niger (.ne), and Ethiopia (.et) for the same type of agreement he has with Cameroon.

Final Words on BlogKits and Adsense

Back in January, I wrote a piece on whether the newly-popular Blogkits blog ad network lived up to their claims of outearning Adsense on blogs. My feeling at the time was that they did not even come close, but I was willing to give them more time to prove themselves.

Blogkits logo

Nearly five months have passed since I wrote the original piece on Blogkits; by now, Blogkits has been on my blog for nearly six months. Before someone points this out in my comments, I must admit that I did cheat on the blogkits challenge a bit; rather than removing Adsense and completely replacing it with Blogkits, I ran both ad networks side-by-side.

So, what are the results?

Blogkits
Impressions: 50,716
Clicks: 286
Leads: 0
Payout: $0.00

Adsense
Impressions: 22,340
Earnings: $39.64

Within the six-month time period, Blogkits has not earned me a dime, despite nearly 300 clicks. This indicates horrible conversions on their part. Meanwhile Adsense was been quietly accumulating the whole time.

Of course, we should not forget that a single sale on Blogkits has the potential to generate more earnings than Adsense; it could just be a string of poor luck that I have no conversions yet. On the other hand, I think enough time has passed to show that Blogkits is not a particularily effective blog monetization solution.

One interesting point is the fact that Blogkits reports twice as many impressions as adsense for the same time period; neither ad network correlates well with the pageview statistics shown by my analytics / stat programs.

Next Page »