Need someone to lead product management at your software company? I create software for people that create software and I'm looking for my next opportunity. Check out my resume and get in touch.

Comments

Comments for Referral Abuse

Excerpt: Aggregators are misusing the http referrer header to identify themselves. Read the whole article…

Johan Svensson
January 30, 2003 5:33 PM

Amen to that. Of the twelve top referrals to my site, seven are aggregator URLs. I hate that. Stick to the User-Agent, for crying out loud. That's what I'll do with Audrey.

Chris
January 30, 2003 10:42 PM

Thanks for the suggestion: http://www.hardhathosting.com/thanks.html

l.m.orchard
January 31, 2003 9:36 AM

Hallo there. I just changed my AmphetaDesk to stuff my thank-you page into the User-Agent: http://www.decafbad.com/news_archives/000405.phtml Seems like a simple enough thing to adopt everywhere, and if everyone agrees on the User-Agent format for aggregators, we might just beable to do something useful with it.

Adam Kalsey
January 31, 2003 2:26 PM

Good idea. Many of the popular news aggregators are open source, so let's just patch them ourselves. I've patched Aggie: http://kalsey.com/2003/01/patching_aggies_referrer/

Mark Paschal
January 31, 2003 4:31 PM

Pretty easy to do in Radio UserLand, if you only want to disable the spurious "Referer" header: http://markpasc.org/weblog/2003/01/31_end_referrer_abuse_in_radio.html

Ingve
January 31, 2003 4:45 PM

I think your summary ("Aggregators are misusing the http referrer header to identify themselves.") is overly harsh. This is not some evil spamming operation by aggregator makers to promote themselves or their software. The idea everybody was enthusiastic about was an attempt to create a more two-way web and give readers a way to "leave a trail", and the referer header was chosen to be able to piggyback on all the referer-reporting infrastructure that already existed in weblog publishing/hosting solutions.

Adam Kalsey
January 31, 2003 4:52 PM

My top five referrers for today are: radio.userland.com/newsAggregator ranchero.com/netnewswire/ ranchero.com/software/netnewswire/ frontier.userland.com/xmlAggravator www.disobey.com/amphetadesk/ Farther down the list I see: www.rassoc.com/newsgator www.syndirella.net/ None of those are being used to tell me who's reading my feed. The only trail that's being left is by the aggregator. It seems to me that these are there as a form of advertising by the aggregators.

Adam Kalsey
January 31, 2003 5:11 PM

And I understand that this is being done on purpose. Some readers (like Aggie, AmphetaDesk, and Radio) can display a pointer to my site in someone'e referral logs. The idea is to allow people to see who was reading their sites. But that's not how it's often implemented. Instead, you get an ad for Aggie. I understand that many people don't have access to their user-agent logs, but they do have referral information. But that doesn't make it right. As Kottke pointed out, it's like IE sticking it's own URL in the referrer header for every page it vists. If Microsoft did that, we'd all scream bloody murder, and rightfully so. But doing it as an upswell from the open source and blogging communities is okay? I lke Mork Nottingham's summary of the whole thing: "If I understand the reasoning behind this, it's that logs make referer available more often than user-agent, and some people were interested in seeing how much their particular agent is used. Unfortunately, misusing the headers for purposes of what frankly amounts to vanity screws the people who want to use them properly." http://groups.yahoo.com/group/syndication/message/3364

Ingve
January 31, 2003 5:13 PM

If the user doesn't configure a specific weblog url then you get the default. Aggregators should probably have a setup/configuration wizard. Since you're one of the lucky few people with access to server logs, what's the situation on Aggie referrals?

Ingve
January 31, 2003 5:51 PM

Mark's conclusion is right even though his reasoning is flawed (the point was to enable producers of syndicated content (webloggers) to see how often and by how many readers their content was fetched, not for aggregator writers to see how much their aggregator was used. Aggie had a traditional (non-user-customizable) user-agent header before it got the overloaded referer header.) I still think that using the address of a web-accesssible subscriptions file would be a "legal" referer header value, but I'm sure someone will tell me if I'm wrong. :-)

Adam Kalsey
January 31, 2003 6:29 PM

I'm not sure what you mean by "the situation on Aggie referrals." Userland stuffed their addresses in the referrer header long before they started adding the user's weblog URL to the field, according to http://radio.userland.com/moreVisibleInRefererLogs Like I said, I understand the reasons for doing so, but I still think it's a bad thing.

Ingve
January 31, 2003 7:06 PM

I also think it is a bad idea, but the intentions behind it were good. Most of the people who "discover" this horrible abuse tend to sound like it's being done for evil purposes and that aggregator writers must be stupid since they're not using the user-agent header. The Aggie referrals question was more or less how many "generic" Aggie referrals you get vs. how many Aggie users take advantage of the opportunity to provide you with potentially useful "hey, this is me and I'm reading you" information... Userland stuffing their address in the referer header provided a benefit for many users even before the user's weblog url inclusion by providing the *count* for how many times a resource was accessed. Noise to you and the server logs crowd, helpful to the many people with blogs on Manila sites etc. :-)

Adam Kalsey
January 31, 2003 10:47 PM

Most Aggie users don't take advantage of this. You do and Anders Jacobsen does, but there's several people that don't. That might be on purpose -- maybe they don't want me to know who they are, or that might be on accident. I also just noticed, while looking through the Aggie source, that you were the one that provided the patch to add the "I'm reading you" referrer advertising into Aggie. You might want to take a stab at my patch and see if you can improve things a bit. This was the first time I'd ever looked at C# code, so I'm sure there's a better way to do what I did.

Ingve
February 1, 2003 12:04 AM

Your patch has a few minor issues (a newline in constant error, and I can't really see where the aggieBase_ string is used now, probably just cut and paste problems) but I'm not sure that abusing the User-Agent header is a huge improvement. If nobody is using the ability to provide information about their feed reading habits then maybe we should just declare this experiment a failure and move on.

Jacques Distler
February 2, 2003 10:34 PM

Well, assuming that if the Request_URI is your RSS feed, one can regard the Referer as most likely being bogus, one can simply not log it. Easy to set up with SetEnvIF and CustomLog.

Rod
March 9, 2006 11:18 PM

Hard Hat Hosting got exactly what they wanted: a link from your site to theirs...

This discussion has been closed.

Recently Written

Mastery doesn’t come from perfect planning (Dec 21)
In a ceramics class, one group focused on a single perfect dish, while another made many with no quality focus. The result? A lesson in the value of practice over perfection.
The Dark Side of Input Metrics (Nov 27)
Using input metrics in the wrong way can cause unexpected behaviors, stifled creativity, and micromanagement.
Reframe How You Think About Users of your Internal Platform (Nov 13)
Changing from "Customers" to "Partners" will give you a better perspective on internal product development.
Measuring Feature success (Oct 17)
You're building features to solve problems. If you don't know what success looks like, how did you decide on that feature at all?
How I use OKRs (Oct 13)
A description of how I use OKRs to guide a team, written so I can send to future teams.
Build the whole product (Oct 6)
Your code is only part of the product
Input metrics lead to outcomes (Sep 1)
An easy to understand example of using input metrics to track progress toward an outcome.
Lagging Outcomes (Aug 22)
Long-term things often end up off a team's goals because they can't see how to define measurable outcomes for them. Here's how to solve that.

Older...

What I'm Reading

Contact

Adam Kalsey

+1 916 600 2497

Resume

Public Key

© 1999-2024 Adam Kalsey.