(Brainstorming) Exploiting bots posting comments on your blog

Hi,

I was just thinking about bots trying to post a lot of comments on my blogs. This is a big traffic and I wondered how to exploit it. So, I started to think deeper about it in order to find a solution - not to ban them definitely - but to exploit them for MY profit.

And I was thinking: what if as soon as my blog detect a comment attempt from a bot, it redirects the bot to a google search with my domain as the keyword AND without the referer?

=> If your blog is not in first page, Google will "think" : "hmm, I have someone who are looking for this website. He does not see what is looking for as the site is in second page. We must rank this website better".

It may be naive, but it is a brainstorming. At the current Blackhat conference in Las Vegas, someone has made a presentation regarding ads, and he told: "as soon as a user visit a website, the website owns the user". The presentation focuses on the capacity to build a Denial of service attack using ads (and therefore using javascript and visits on a dedicated webpage to DOS another website). But I am sure that we can do something which would be profitable for business.

Feel free to comment!

Hmm try to do a research .. Here are few smart bots that can do this for you

Sounds like a wonderful idea to me. But how do you plan to implement the idea and more importantly, how would you get around a false positives? (You would need to implement a mechanism to detect if a bot is really a bot and not a human, but again bots are getting more and more sophisticated as time goes by)!

edithcowr said:

Sounds like a wonderful idea to me. But how do you plan to implement the idea and more importantly, how would you get around a false positives? (You would need to implement a mechanism to detect if a bot is really a bot and not a human, but again bots are getting more and more sophisticated as time goes by)!

Click to expand...

In my experience anyone that posts a link is Generally a bot.

New blogs have only bots for comments. And new blogs are only from 2 to 5th page of Google.

wont the bots not accept the redirect and just go on to the next page to spam on? im pretty sure the redirect wouldn't even be processed.

There are two main questions:

1 Are bots programmed to follow HTTP 302 Redirect? (302, not sure, to be checked, I dont remember the HTTP Code for that)

2 Do google implement a cookie/session-cookie/ID to see if the link comes from real search (I mean : typing something in Google search), and what is the impact to bypass this step?

For 1, i am pretty sure that a LOT of bots follow HTTP Redirect.

For 2, I am pretty sure that a lot of people type directly their search with the google/search&q=yourkeyword, through third parties programs and web portals.

So, I would say: it can work, but I am not really sure.

goldendeli said:

wont the bots not accept the redirect and just go on to the next page to spam on? im pretty sure the redirect wouldn't even be processed.

Click to expand...

Maybe. What about the current bots here? Do they follow redirects?

Referrer is set on the client side. There is no to predict what the referer will show as once you redirect away.

Id be interested to hear from someone that has more information on Scrapeboxs functionality. My assumption is that the redirect would be skipped as it's not a valid posting URL. Kepe in mind all of the spammy redirects that already exist Id assume that the tools would just skip those.

its easy, i had implemented something similar on a client site sometime ag0

1- bot comes, we detect it via refer etc.
2- instead of showing him the comment box, we show him the google custom search engine box, with a custom query preset.

then when the bot uses : click" to submit content, it is actually submitting custom query to google custom search engine.

its not really rocket science you know. you just need to think out of the box.