Friday, November 30, 2012

The Internet Has Created Various Opportunities For Conflict

Most physical threats used to require physical proximity, to be seriously considered by the authorities.

Before the Internet became a reality, if you were to report a crime which involved a physical threat to you or some one whom you knew, chances are that you would be reporting a friend or relative - or at least a neighbour or somebody geographically close to you.

Now that the Internet is part of our daily lives, many Blogger blog owners, readers, and comment publishers - all of who use the Internet for various networking activities - have no idea of the possible international challenges involved in their activities. With the Internet involved, these dangers can come from somebody in another city, state, or country, who is a complete stranger to the potential victim.

Many people, offended or threatened by an abusive comment or post in a Blogger blog, immediately report their concern, in Blogger Help Forum: Something Is Broken.

The assumption made is that Blogger, when informed in the forum, will immediately remove the offensive or threatening content.

Not everybody realises that the varying nature of any given abuse, even when expressed in a Blogger blog, won't always be the responsibility of Blogger / Google to provide action. Some abusive content will require contact, with somebody in your local area.

Some abuse can be handled by your reporting it to Blogger / Google - and other abuse must be handled by the courts system - lawyers and judges, or by law enforcement.
You are responsible for reporting any offense accurately, and to the right agency - not solely to Blogger / Google. The above list is based upon USA legal terms. Other countries may use different definitions.

You need to understand the differences between Defamation and Impersonation, and other abuses, before attempting to report any threat to Blogger / Google. And, take action depending upon the medium used by the threat. Blogger / Google won't accept complaints about comments - as comments are jointly the property and responsibility of the blog owner, and of the comment publisher.

If the courts are involved - and the judgement is in your favour, you will need to submit a court order to Google.

The bottom line here is that some Internet conflicts may take time and effort to resolve. The courts system, which is currently based locally and nationally, may have to evolve, as the Internet brings strangers together - and creates opportunities for conflict.

>> Top

The Missing / Invisible Pages Index Gadget

Occasionally, a blog owner wants to add the Pages Index gadget to the blog, but just can't.
I go to add it - and I see "Already Added" - but where is it?

The first thing to check, when this happens, is the "Show pages as" option in the dashboard Pages display. Sometimes, you'll find "Don't show" selected. Other times, you'll find "Top tabs" - but the template may lack the code which houses the "Top tabs" gadget. This will be a problem for older templates, installed before the Pages index gadget was offered - as well as some third party templates.

Try selecting "Side links" (or change from "Side links", to "Top tabs", and back to "Side links") - and see if the gadget shows up, in the sidebar. Each time you change the setting, hit "Save arrangement".

After each change, view the blog, to verify success. Remember to clear cache, and restart the browser, each time you view the blog.

Once you get the gadget to show up in the sidebar - and if it matters - change the option to "Top tabs", and see if it shows up there. If not, you'll have several options.
>> Top

Thursday, November 29, 2012

After You Publish Your Blog To A Custom Domain, Should You Update Internal Links?

One interesting question, which comes up from time to time in Blogger Help Forum: How Do I?, is about Custom Domain Publishing - and what to do, after Transition completes.
Now that my blog is successfully transitioned to the domain URL, should I update the internal blog links, in the post contents?
This is a question that deserves some thought. From an aesthetic sense, it makes sense to do this - hoping that you will be paying for the domain, for eternity. But, is it worth the effort?

There are several issues, which may be relevant, when considering updating internal blog links.

Remember that updating the internal links is a manual effort - this has to be done on a post by post basis.

  • How much time do you have to spend, updating the link URLs?
  • How much effort will this take? How many old posts do you have, with how many internal links?
  • How likely are you to go ever back to the BlogSpot URL?

Remember that one of the features of custom domain publishing is the DNS Based redirect, of the BlogSpot URL, to the domain published URL. This is an automatic feature, it's total and immediate - and it will continue to work, only as long as the domain continues to work.

New posts will use the updated published URL, and the domain.

As you continue to publish posts in your blog, your new internal links will use the domain URL - unless you manually convert each one, as you edit each post.

If you ever opt to publish back to BlogSpot, all of the links, pointing to the domain URL, will be problems - when the domain stops redirecting. If you spend time manually updating each link now, that's the same amount of time that you'll have to spend reverting the updated links, when you publish back to BlogSpot.

The BlogSpot URL will redirect to the domain, forever.

Remember that your BlogSpot URL continues to operate, forever - regardless of the domain published URL.

From what I can tell of the DNS infrastructure used by custom domain published blogs, the domain DNS settings are cached locally, for all readers of any given custom domain. If the BlogSpot to domain redirect is similarly cached, it's unlikely that there are any reader experienced performance issues, from people reading blogs and clicking on BlogSpot targeted internal links, that redirect to custom domain URLs.

Other than the aesthetic issues, updating internal links may not be necessary.

As far as I can tell, when thinking about this carefully, there is no real reason - other than aesthetics - to ever update the BlogSpot based internal links, to directly point to the domain URL. Spend your time, after Transition has completed, profitably. Work on the blog, and get it re indexed, under the new URL.

Your Blog Address Is Unique - Some Details Are Not

Occasionally, in Blogger Help Forum: Something Is Broken, we see signs of people who don't understand the concept of unique Blogger identities - or contrarily, Blogger identities which won't be unique.

I can't publish my blog to the name that I want.
or

Another blog is using the same name as mine!
or

Someone is impersonating me!!

Some of these complaints are reasonable - and could keep a team of judges and lawyers very busy, for a while, when properly reported.

Other complaints come from people who don't quite understand what identities in our Blogger blogs are uniquely our property - and what identities are not uniquely ours.

When you first setup your blog, choose the address with care.

When you setup a Blogger blog, one of the first things that you must choose - and choose carefully - is the blog Address. Once you have chosen the Address for your blog - and until you successfully give up this Address, the chosen Address is yours, for eternity. Nobody else can use this Address, in publishing their blog.

You can change the Address (also known as the URL) of your blog, whenever convenient to you - but any change that you make is subject to availability, based on Addresses which may have been chosen by other people. And it is worth your while to plan any Address change, carefully.

Your address will be unique - your template and title may not be.

When you setup a Blogger blog, and choose the Address, you also choose a blog Title, and Template. Anybody else, setting up their blog, may choose the same Title, and / or Template.

Many people will choose the same Template as you do (and later customise their template, using the Template Designer). Similarly, anybody is free to choose any Title (and later change the title, whenever convenient to them).

A blog which simply uses the same Title as yours is probably not Impersonating you. A blog which contains content scraped from your blog, and with the same Title, may constitute Impersonation.

Contrarily, a blog which simply contains content scraped from your blog, without impersonating, may constitute a copyright, or DMCA, Violation.

Conflict, between you and other blog owners, is not impossible.

The Internet, in its ability to bring people together, is going to cause conflict. Some conflict will come from many different people, simply not understanding other peoples lifestyles and traditions. Other conflict will come from people intentionally abusing you.

You need to understand the differences between the various abuses, before attempting to report any perceived offense. You are responsible for reporting any offense to the right agency.

It's up to you to report impersonation, copyright violation, or other abusive content to the right agency - and it's up to each individual agency to decide whether or not to act upon your complaint. You must report any problems properly, for any action to be taken.

Comments are your responsibility to allow / approve - or not.

Comments, posted to various blogs, are handled differently. Blogger / Google considers comments published to blogs (and not dismissed as spam) to be a freedom of speech issue. Comments are jointly the property of the blog owner, and the publisher of each comment.

If someone else, publishing a comment, offends you, that is a concern which can be handled only by the blog owner. Blogger / Google, without a court order, will not get involved.

If the blog owner permits anonymous comments, anybody can use any identity that pleases them. This may lead to apparent impersonation - but any impersonation conflicts will be up to the blog owner to resolve.

The bottom line here is that some Blogger / Google hosted problem content may require discretion and patience by you, for you and other people to receive appropriate treatment.

---

Your Blog Address Is Unique - Though Many Other Identities Are Not
http://blogging.nitecruzr.net/2012/11/your-blog-address-is-unique-though-many.html
Your Blog Address Is Unique - Other Details Are Not

Wednesday, November 28, 2012

Blogger Magic - Verifying A Blog Feed URL

It's a fairly simple matter to determine the newsfeed URL, for any given blog, by examining the blog template code.

Besides the base feed, a blog may publish an extensive array of additional feeds, which won't be listed directly in the blog template code. You may use any given feed, in networking your blog, with any Google or non Google service.

Starting with any feed URL, what do I do? I could just open my favourite feed reader, or social networking web site, and paste the URL in place. But what if the feed reader or web site wasn't working properly, or I misunderstood the instructions? What if I see
Invalid URL
or the like, what do I do?

The smart thing to do, before you setup a FeedBurner feed or any complementary non Blogger service, is to test the feed.

Many modern browsers (Firefox or Internet Explorer, for instance) will give you a formatted display, when you are loading a feed URL.

Tuesday, November 27, 2012

To Republish A Custom Domain, You Do Have To Add A Second "CNAME"

One of the challenges of using Blogger involves following the instructions.

Blogger / Google personnel provide Help instructions which are not always updated - sometimes they simply write a new Help instructions document, leaving the old Help instructions in place.

The policy of leaving old Help instructions in place - and sometimes conflicting with new displays and procedures - occasionally causes confusion. One scenario where this causes a problem is in publishing or re publishing a blog to a custom domain.
I've seen instructions that when you buy a domain from Blogger / Google, using "Buy a domain", you won't need to create a CNAME record.

One of the advantages of using "Buy a domain" is the ease of setup. If you use "Buy a domain", you don't have to bother with any of the details. This is generally - but not always - true.

(Update 2013/09): The second "CNAME" won't be required, in all cases. If you don't see instructions for adding a second "CNAME", focus your efforts on getting the domain working, with righteous base DNS addresses,

Sometimes, even using the "Buy a domain" wizard can later present a problem.

One of the known problems with "Buy a domain" results in a partially setup domain - and with a partially setup domain, you may have to re publish the blog to the domain, to get the new domain to work completely.

To re publish the blog, you have to verify your ownership of the domain - even if you previously used "Buy a domain". And the additional step of adding a second "CNAME" overrides the old Blogger Help instruction
If you bought your domain name from Blogger, you won't need to create a CNAME record.
When you are instructed to re publish the blog using "Advanced settings", that 's what you must do. And, when "Advanced settings" contains instruction to add a second "CNAME", then please - add a second "CNAME".

>> Top

Saturday, November 24, 2012

Redirecting The Traffic From Your Blogger Blog

Some Blogger blog owners are confused about their ability to redirect traffic to, or from, their blogs.

Sometimes this leads to problems, as in the need to report a problem with spam classification, in Blogger Help Forum: Something Is Broken
Why was my blog just deleted, for "Malicious JavaScript"?

Other people will want to know why, after renaming their blog, all the search engine references now point to a dead URL. Still others may want to rename specific posts, and yet have the post URLs match the new titles.

Blog URLs, and Post URLs, are complex details, for Blogger blogs. By default, both are managed for you. Not everybody understands how to manage blog and post URLs, when necessary.

Not every blog owner understands that ones readers are not possessions, to be manipulated at will.

Spammers would appreciate the ability to use Blogger blogs as starting points.

Many spammers would love to use various Blogger blogs as gateways, redirecting their readers either to other Blogger blogs, or to non Google controlled websites. In order to discourage spamming activity, neither type of redirect is permitted, by the Blogger spam classifier.

Even if automated redirection was permitted, many redirection techniques may not work for everybody. Modern browsers, designed to prevent abusive activity like hacking and spamming, may have filters which explicitly block DNS settings, and scripts, designed to redirect traffic from one website to another.

If you migrate a blog, then redirect, you may not see consistent results.

If you design your URL migration strategy to require automated redirection - and even if Blogger / Google does not delete the blog for abusive technique - you may still not see a consistent transfer of existing traffic, to your new URL.

You can redirect a Blogger blog, to a non BlogSpot URL, using properly setup custom domain publishing - "CNAME" referral. That is the only valid way to redirect a BlogSpot URL, to a non BlogSpot URL. Any other method will eventually leave you posting, in Blogger Help Forum: Something Is Broken
Why was my blog just deleted, by Blogger?

If you migrate to a new BlogSpot URL, use a Welcome post in a stub blog.

If you rename your blog - and publish to a new BlogSpot URL, your only recourse is to publish a "stub" (empty) blog to the old URL, and visually redirect your readers.
This blog is now published as "blogger-status-for-real.blogspot.com". Please update your bookmarks.


Blogger does not offer ".htaccess" features, such as redirection.

One disappointment, experienced by non Blogger webmasters, is the lack of ".htaccess" based redirection. You do not have access to the "blogspot.com" root folder - and you cannot use ".htaccess" based redirection.

You can redirect the feed - after you setup a new feed.

You can, if you wish, redirect the blog feed, after renaming the blog - but this should be done only when necessary.

There are several specific cases where the blog feed should not be redirected.

Custom redirects does not provide BlogSpot to BlogSpot redirection.

Blogger recently provided us the option to redirect traffic from one blog post to another - but the syntax used by the custom redirects wizard explicitly prevents redirection outside the base blog URL. That said, we have seen some imaginative redirections, between different URLs in the same blog.

Use of the custom redirect feature can generate interesting problems, not all of which can be prevented, easily. You can redirect some URLs - but you need to understand what you can, and cannot do - and why you cannot do everything that you would like.

Thursday, November 22, 2012

Use A Well Protected Browser, To Block Redirecting From Misbehaving Code And Gadgets

Regularly, in Blogger Help Forum: Something Is Broken, we advise people about problem code or gadgets in their blogs.

Generally, this follows reports by blog owners, that their readers are being redirected to unexpected and unwanted blogs and websites, from their blogs. Sometimes, we get the reply
I can't remove the code. Every time I login to Blogger, I am redirected, just as my readers are being treated!

When we see the latter complaint, we recognise yet one more blog owner who does not know how to properly protect himself, from malicious code and websites. Most people, who know about Layered Security, know that proper browser security is an essential complement to a properly chosen and maintained anti malware filter.

Many people, who care about browser based security, use Firefox with NoScript.

This combination provides Unix level security, "deny by default, permit by exception". Simply install NoScript as an add-on, to Firefox, to get started. Alternately, you may use Chrome with ScriptSafe, or Opera with NotScripts.

When using your browser with a script filter, there will be specific Blogger / Google websites which you should trust, and others which you should not trust.

Every time you surf to a different website - and decide that the owners of the website, which you are now viewing, have your best interests in mind - configure NoScript to allow that website, to display properly on your computer. When you find that a trusted host website does not display properly, examine the NoScript taskbar and the list of websites used by the host website. Look at the NoScript Options menu, carefully. Allow specific websites which you trust, and Forbid all other websites which you do not trust.

Deciding which websites to trust, based on their presence in the NoScript Options menu, will be a learning experience for a while. For some host website pages, which use a large number of unfamiliar websites, you may have to carefully select to "Temporarily allow all this page" - or you can "Temporarily allow" each single website, one by one, until the host website page displays properly.

When you decide to (permanently) "Allow" any website, that website will be "Allowed" on all other host websites where you may surf. Conversely, any website which you never select to "Allow" - such as the problem website which is providing the misbehaving code - will never execute on your computer again. This will prevent redirection on your computer, allow you to safely use the Blogger dashboard, and edit or remove any dodgy code which may be part of your blog.

After removing any dodgy code from your blog, always clear cache and restart Firefox, to test the effects of your editing.

>> Top

Tuesday, November 20, 2012

Add A Simple "Recent Comments" / "Recent Posts" Gadget To Your Blog

The recently observed problems with some third party gadgets, previously added by many blog owners to their blogs, leaves these blogs lacking various accessories.

One of the gadgets identified is the "Recent Comments" / "Recent Posts" gadget pair. For many blog owners, this gadget is not impossible to replace.

Blogger provides us with a native accessory, called a "Blog Feed" gadget, which will provide acceptable "Recent Comments" and "Recent Posts" functionality, for many blog owners.

Look at the sidebar of this blog, for "The Real Blogger Status - Comments", and "The Real Blogger Status - Posts". Those are "Recent Comments" and "Recent Posts" gadgets, which are based on the Blogger supplied "Feed" gadget - which is not a third party accessory, and is not subject to future third party peccadilloes.

To make your new gadget, start with the URL of the blog feed desired.

Add a Blogger supplied Feed gadget, using the "Add a gadget" wizard, in the dashboard Layout display.

This is the URL of this blog.
http://blogging.nitecruzr.net

This is the URL of the blog comments feed.
http://blogging.nitecruzr.net/feeds/comments/default

This is the URL of the blog posts feed.
http://blogging.nitecruzr.net/feeds/posts/default

Setting up a "Blog Feed" gadget is simple enough.

  1. Add a "Feed" gadget (Only select the "Feed" gadget, "By Blogger"!!!), using the "Add a gadget" wizard.
  2. Plug in the Feed URL (see my examples above), and Continue.
  3. Review / change the options offered, and Save.
  4. Test your new blog accessory - provided by Blogger - with no future hacking activity anticipated.

Avoid any similarly named gadget not "By Blogger" - distributed from "Add a Gadget", or from a private blog or non Google website.

And, you're done. Wasn't that simple?

Improved Spam Review / Undelete Option In Blogger

One of the more positive changes in the "New GUI" involves an improved ability to find, and correct, deleted and locked blogs.

Finding deleted / locked blogs, under earlier versions of Blogger, was always a challenge - both for the person looking for the necessary display - and for the people trying to instruct how to find the necessary dashboard display.

In the current Blogger dashboard, one simply logs in and looks for the "Deleted Blogs" button - right beneath "New Blog", when the blog owner has any self deleted blogs, or any blogs deleted or locked by the Blogger abusive blogs classifier. Clicking on "Deleted Blogs", we see a list of blogs - with either an "Un delete" button (for self deleted blogs), or a "Restore" button (for spam classifier locked / deleted blogs).

Neither the "Restore" or "Undelete" button produce an immediate or universal result - both are still subject to previous limitations.

It is simply now far easier to find the spam review / un delete mechanism, than it was under the previous GUI.

If your blog was deleted by you - or deleted by Blogger for hosting malware, you should be able to hit "Restore", and the blog will be restored while you wait. If the blog was deleted or locked by Blogger for suspected spam hosting, you will probably have to solve a CAPTCHA - then wait 24 to 48 hours, while the blog is reviewed. In the long run, you will probably find this extra effort will be worth your time.

In some cases, the owning Blogger account may be locked, following unusual account activity - generally, brute force password guessing attempts, in an effort to hijack control of the account and any owned blogs. After submitting an account restore request and / or changing the account password, the blogs owned by the account will be restored - generally 24 to 48 hours after the account is restored. This is a normal, and unavoidable, result of Google, protecting your account and blogs from hacking activity.

Just be aware that not all blogs will be listed by the "Deleted Blogs" wizard.

Please be aware of the limitations of the restore process. This process serves blog owners who have been spuriously classified. If you request restore - and Blogger confirms that you are a spammer - you will be best advised to start over, or to find a different platform for publishing.

If you do start over, you should be very careful, and avoid making the same mistakes - lest you be subject to more strict punishment. Spammers simply are not welcome, in Blogger / Google - sorry.

>> Top

Monday, November 19, 2012

Using The Google Apps Domain Root Redirect Setting

Recently, Google Apps added a setting to the domain administrator desktop GUI, which controls the redirect of the domain root (aka "naked domain"). We initially observed this setting, as an option in working around the problem of setting the domain root redirect, in the Blogger Publishing "Advanced Settings" wizard. It's also possible that this setting should be used in recycling the domain settings, when faced with the "dreaded "Another blog ..." error.

Use of the Google Apps Domain Redirect setting is not complicated. It starts with setup of the domain administrator account. For any newly purchased domain - as well as for domains purchased directly from a registrar, it's a fairly simple matter to setup a Google Apps domain administrator account - then to set (or reset) the redirect.

Having logged in to your new Google Apps account, as the domain administrator, you simply click on "Domain settings", then "Domain names". Under the Status column for your domain, you'll find the link to "Change redirect". Hoping that you have a standard asymmetrical DNS configuration for the domain, already setup, you can ignore the warning
To enable this redirect, you must change the A record with your domain host.
and simply click on "Redirect your naked domain" (for a new domain), or "Change redirect" (for an existing domain).

This is a new domain, with the domain root not yet redirected.
This is an existing domain, with the domain root redirected to "www.nitecruzr-test.net".
If the domain DNS addresses are not setup with both the source and target of the redirect (the "naked domain" and alias) pointing directly to the proper Google servers, as in either the symmetrical or asymmetrical DNS address configuration, the redirect setting is useless. The redirect only works within Google servers. This is another scenario where DNS addresses which use forwarding will not work.


The "Change how your naked domain is redirected" display simply lets you designate the "www" (or any alternate) alias as the target for the naked domain redirect.
Designate a web address to direct your users to when they access your naked domain.
Entering the target (defaulting, simply, to "www"), then hitting "Save changes", you are done with this procedure. Now, the domain root should redirect to the alias of your choice.

If you are recycling the domain settings, you'll want to change the redirect setting to something other than "www" - let us say "test" - then change back to "www".
  1. Set the redirect to "test", and hit "Save changes".
  2. Set the redirect to "www", and hit "Save changes".
  3. You're done with this exercise.
If you are clearing the setting, so you can continue with the Blogger Publishing process, you may shorten the exercise a bit.
  1. Set the redirect to "test", and hit "Save changes".
  2. You're done with this exercise.
In either case, you now continue with the main task at hand, if necessary.

>> Top

Sunday, November 18, 2012

Blog Owners Seeing "Error 14" Or Similar Symptom, When Attempting To Publish To A Custom Domain URL

We're seeing a small but steady flood of reports, in Blogger Help Forum: Something Is Broken, from blog owners attempting to publish their blogs using a custom domain URL.
I am not able to redirect my blog from blogspot to my own domain! Blogger is giving me the error
We have not been able to verify your authority to this domain. Error 14.

This specific problem has been observed numerous times in the past, ever since Blogger added the domain ownership verification process to the custom domain publishing feature. Problem reports require careful diagnosis, involving examination of the basic DNS addresses setup with the registrar, to verify the "Error 14" as the primary problem.

Because careful diagnosis is required, for each case reported, we're not adding a Rollup Discussion in the forum. Instead, we request that each blog owner, observing this problem, post her / his problem report in a topic started for that purpose, by himself / herself only. This will allow us to inventory this problem properly, and assist Blogger Engineering in isolating and fixing this problem promptly, so the blog owners can get on with the after publishing process.

Reports of this problem appear to have started in volume late Saturday, 11/17, Pacific time - though some reports, examined in detail, mention the problem initially observed several days ago. The initial volume of the problem appeared to come from SouthEast Asia - but as additional reports were posted, we see Europe and the Americas apparently represented.

Blogger Engineering is now aware of the problem, and will investigate. We'll continue to monitor the forum topics, and to post an initial advisory FAQ, as a response to the reports observed - when reports contain clear evidence of the "Error 14" being a primary symptom. Please monitor that FAQ, and this post, for any ongoing updates.

>> Top

Thursday, November 15, 2012

The Free Domain Registration Service "co.cc" Appears To Be Down

Some Blogger blog owners, trying to save a few dollars while publishing their blogs to a non BlogSpot URL, have used the free service "co.cc" for registering their domains.

As "co.cc" increased its base of "customers", their reputation for providing free registration grew - and they became popular with scammers and spammers.

Last year, Google, weary of the overall poor search engine reputation of co.cc customers, de indexed all websites registered by co.cc. This week, co.cc apparently stopped serving DNS information for its "customer domains".

Strictly speaking, "co.cc" was not a registrar - and the blogs and websites published by its customers were not using registered domains.

"co.cc" was the domain "co", registered by its owner, and providing subdomains.

The "Top Level domain co.cc" - which by its name implied an Internet service operating from the Cocos (Keeling) Islands - was in fact the domain "co", operating out of Korea, and registered in the Cocos (Keeling) Islands. All "domains" given out by "co.cc" were in fact sub domains to the domain co.cc - and this is where the problem started.

All blogs and websites, published to a "co.cc" subdomain, were aggregated by the search engines as the "co.cc" domain. As the number of co.cc registered scammy and spammy websites increased, their search engine reputation dropped.

Non spammy blogs and websites either went out of business, or were transferred to legally registered domains, because of the low reputation and lower search engine originated traffic.

The owners of "co.cc" realised that their scam had been outed, and closed down.

Finally, the owners of co.cc - supposedly "JONG SUNG, KIM" of "GOYANG,GYEOUNGGI" - realised that their run was over, and that they could no longer hide their scams and spams behind legitimate blogs and websites. Apparently, they have now shut their doors.




The old adage comes to mind.
You don't get something for nothing.

If you published to a "co.cc" subdomain, you have to publish back to BlogSpot.

If you registered your custom domain using co.cc - and your blog is now offline - you're going to have to publish the blog back to BlogSpot, to get it online again. If you want to use a domain URL, you have to repeat the custom domain setup process - starting with a new, properly paid for, domain URL.
(Update 2015/02): We now have more of the same, from "co.vu".

A free ".co.cc" "domain", when it was working, was worth precisely what you paid. Now, it's worth less.

Wednesday, November 14, 2012

Blog Owners Report Mysterious Blogs Added To Their Dashboard Blog List

We are seeing a small but steadily increasing stream of problem reports, in Blogger Help Forum: Something Is Broken, from Blogger blog owners, wondering where these mysterious blogs, being added to their dashboard "My blogs" list, are coming from.
Is anyone else experiencing random blogs being added to their dashboard? I login, and I notice that many blogs have been made - and they're all with names that are just a jumble of letters and numbers, but no posts. All of them lead to the same blog though.


Here's a random list of the names of 7 such blogs, which were recently created in the "blogspot.com" name space. If you wish to examine these blogs, and these have not yet been deleted by the Blogger anti spam processes, I strongly advise that you use a proxy server, or similar isolation technique. Never examine any hacking / spam attack component, unprotected.
yyxfkfgpiy
x24xd2wtu1
4o4fq0rqp9
26djmc3xyh
m9s5tdor2l
h62wo5uthr
bsojvu43gk

Some blog owners are seeing dozens of these mysterious blogs. Adding to the confusion, a couple owners have even thought that their legitimate blogs have been replaced. Fortunately, what is happening is that the legitimate blogs are still there - just not visible in the noise.

When queried for details, many owners report having received, and accepted, an offer involving FaceBook, and the suggestion to "Change your colors". Apparently, if logged in to both Blogger / Google, and FaceBook, this mysterious "FaceBook app" will simply setup quantities of BlogSpot hosted spam blogs, frighteningly reminiscent of blogs created as part of the long ago observed Russian Business Network spam blog farms.

Each blog created has the same initial content - a display, with the offer to "Change your FaceBook colors". The link to accept the offer then leads to a non Google website, which installs the malware, which creates the mysterious spam blogs, in mass quantity. For your examination, here is one example spam blog - which may or may not currently be online, using a proxy server link.
http://anonymouse.org/cgi-bin/anon-www.cgi/http://yyxfkfgpiy.blogspot.com/


We don't yet know what, if anything, is being installed on the computer used in the blogs creation - nor how malicious the virus is, when installed on one's own computer. Our advice is simple - avoid becoming a victim. If you are receiving invitations for this service, it's possible that your FaceBook friends, supposedly sending the invitations, are the current victims. If you ignore the offer, you should be safe.

It's possible, too, that this attack is enabled by the massive attacks of seemingly purposeless spam comments, being published on various blogs.

If you are concerned about this situation, you might want to check all of your blogs for unfamiliar code - then review your current protection, and even consider using Google 2-step verification.

>> Top

Tuesday, November 13, 2012

Blogger Comments Being Posted Using Anonymity

Some Blogger blog owners use their Blogger blogs as the center of their peer to peer networking life.

Many blog readers are expected to post comments - and to leave their email addresses, as part of their message or profile, to allow direct contact. Long ago, I used the email address of my commenters, as part of an easy "Contact Me" form, on this blog.

Recently, we've been noting that Blogger comments don't always include a useful email addresses - many comments simply describe the commenter as
noreply-comment@blogger.com
Not all blog owners - and readers - appreciate this change.
When I leave a comment using my google profile, it isn't linking my profile with my email address. How do I get my email address properly displayed?
and
Why do so many comments, published to my blog, show the email address of "noreply-comment@blogger.com"? How do I email my readers?


For some time, we've known of the dangers of revealing your email address to the world, in general.

Blogger blog owners have been a known special risk, with their email addresses. Google developed Google+, with the Google+ profile, to allow everybody to network with their friends - both old and new - without the risk of revealing one's email address.

Google+ replaces email completely. You can share comments, messages, photos, and videos with anybody, in a self contained universe - and you can define your own, personal universes. This leaves the need to reveal your email address completely unnecessary (though you can use email, if you wish, without knowing anyone's address - or revealing yours).

After Google+ became popular, Blogger added the option to link our Blogger blogs with our Google+ profiles. Blogger profiles, based on Google+, are cleaner, and use the Google+ displays to update.

To encourage people to use Google+ for peer to peer networking activity, and to make our Blogger accounts and blogs safer, Blogger has eliminated our email addresses from all outside correspondence - including when we publish comments on Blogger (and non Blogger) blogs, using a Google+ based Blogger profile.

If we publish a comment on somebody's blog, and the blog owner has enabled comment moderation or notification, our comment shows up in the email inbox of the blog owner - but with our email address displayed as "noreply-comment@blogger.com".

With email addresses not displayed, this helps protect our Blogger account names from becoming unnecessarily revealed. Blog owner - reader comment communication is still possible - but again, without the email address of the reader being known.

By eliminating our email addresses from our comments, Google is helping to protect our accounts and blogs, while letting us continue to comment on each others blogs - and to eliminate one type of unnecessary spam from our blogs.

Google+, which replaces email for networking, uses a "Friend of a Friend" relationship to let you expand your universe infinitely, with each comment, message, photo, and video that you share. It lets you control the expansion of your universe - if you wish. And, it helps keeps your Blogger blog under your control.

Monday, November 12, 2012

Blogger Won't Censor Comments, Or Accept Abusive Comment Reports

We have seen this question, periodically, in Blogger Help Forum: How Do I?
When will Blogger provide me with the option to block an abusive commenter, from my blog?
This is a request that simply cannot be fulfilled.

The issue of blocking individual commenters won't be solved by a new Blogger feature.
  • It's technically impossible.
  • It's contrary to Blogger policy.

Any abuser of Internet services (aka "hacker", "spammer", or "troll"), with any ability, knows how to create multiple Google accounts without effort. Blogger Engineering is unlikely to spend time developing a new feature ("Block this comment publisher") that will simply provide you with a false sense of security, have no effect in the long term, and require an unproductive use of their time.

If you realistically feel that a comment publisher represents a legal and physical threat to you, you should report the threat to your local police agency. Other than physical threats, Blogger regards comments as a "freedom of speech" issue. Comments published on your blog are jointly the property - and the responsibility - of the comment publisher, and you.

As the blog owner, you are allowed to choose which comments publish, or remain published, on your blog. You can moderate before, or after, comments are published.

If any comments offend you, moderate or delete them promptly. Concentrate on publishing your blog, and ignore the abuse. Eventually, the person abusing you will get bored, and move on.

>> Top

Sunday, November 11, 2012

Observe DNS Address Entry Conventions

One of the more frustrating steps involved in setting up a custom domain comes with entry of the DNS addresses, into the domain host or registrar's DNS dashboard aka zone editor.

Whether you are setting up a new domain, just purchased directly from a registrar - or re publishing an existing domain, purchased using "Buy a domain" - the addition of the proper DNS addresses is essential to successful custom domain publishing.

Sometimes, you just can't get the zone editor to accept what you are provided by "settings instructions". Other times, you enter the proper values, your update is accepted by the zone editor - and the Blogger Publishing wizard rejects your attempts.

Even after repeated attempts to publish your blog to the domain, you can get another "Another blog ..." error - maybe an "Error 12" or variant.

You may see "Another blog ...", in spite of your efforts.

This may be in spite of the fact that you are retrieving a new "Name" / "Destination" periodically from "settings instructions", and dutifully adding or updating the domain ownership verification "CNAME" Alternately, you may just be adding the base DNS "A" or "CNAME" addresses.

There are syntax conventions, for both "Name" and "Destination".

Every blog owner needs to realise that the zone editors have conventions for entry of both the "Name" ("Label" / "Host"), and the "Destination" ("Target" / "Points To") values in the DNS address records ("Zone Entry"). The conventions used will vary, from zone editor to zone editor - and the differing conventions will affect the success of your domain publishing attempts.

You may see the results of an error immediately, or later.

In some cases, the zone editor will immediately reject your entry, if you mis enter the value. In other cases, the entry will be accepted - but Blogger will reject your attempts to publish. Either scenario can be caused by mis entry of either the "Name" or "Destination" value, and your overlooking the differences between "absolute" vs "relative" addresses.


GoDaddy adds the trailing ".", automatically!


This problem is observed by some as the mysterious "period" / "full stop".

  • If you omit the period, and it is required, the Zone Update may take place - but the Blogger Publishing wizard will overlook or reject the resulting DNS address.
  • If you add the period, and it is not allowed, the zone editor will reject your attempt.

This can happen for either the "Name" or "Destination" value.

The problem cannot be resolved by Blogger / Google.

Here, I will note that this problem is one which neither Blogger nor Google can resolve. Whether you purchased the domain using "Buy a domain" - or directly from the registrar - if you use the DNS dashboard / zone editor wizard provided by the DNS Host / Registrar, your understanding of the conventions observed by the zone editor are your responsibility.

You, the domain owner, must determine the syntax requirements.

There are requirements for entering the "Name" and for entering the "Destination" values - and you have to find out, and adjust to, each requirement.

For some zone editors, with a domain of "mydomain.com", you will probably enter the published address - "www.mydomain.com" - as "www". This says that the "Name" value is "relative" to the domain URL.

You can't enter the domain root, "mydomain.com", as "mydomain.com" - as this would give you a DNS address of "mydomain.com.mydomain.com" - and yet another "Another blog ..." error. You will probably need to enter the domain root as "@" or a similar special character. This, too, is your responsibility to verify.

With other registrars, "mydomain.com" is entered as "mydomain.com". Nobody but the registrar can tell you which case affects your domain.

If you require assistance, be prepared to provide details.

If you are asking for help in Blogger Help Forum: Something Is Broken, and I am advising you, I'll be asking you for three essential values.

  1. The BlogSpot URL.
  2. The domain URL.
  3. The "Name" / "Destination" values provided by the "settings instructions" document, or "Error 12" et al display.

None of these values are optional - and strict attention to accuracy and detail, in your reply, is essential.

If you redact any portion of what you provide, I'll only ask you again, to not redact details. And I'll repeatedly advise you to always copy and paste - never type by eyeballing - both the long and short tokens ("Name" / "Destination") in the "Error 12" et al displays.

Friday, November 9, 2012

Blogger blogs redirecting to "scrapur . com"

This week, we've seen several reports in Blogger Help Forum: Something Is Broken, from Blogger blog owners, reporting the latest hijacking of their blogs.
My blog is being redirected to a spam site - was it hijacked?


As is all too frequently the case, the redirection appears to come from third party code or gadgets, willingly installed by the blog owner. Examination of the website in question appears to indicate a long expired domain.
This domain name expired on Nov 7 2012 11:32:24:000AM
It's possible that, right now, this is not a maliciously planned hijack - though any expired domain can be re purchased for a devious or malicious purpose.

In several cases, the redirecting code appears as part of an installed XML gadget, a version of "Recent Comments". In other cases, we have observed naked JavaScript code, installed directly into the blog template. Here are identified examples - though you may see other variants.
<script style="text/javascript" src="http : // scrapur . com / index / wp-content / uploads / 2008 / 04 / rc . asp"> </script>
or possibly
<script src='http : // scrapur . com / index / wp-content / uploads / 2008 / 02 / smile . js' type='text/javascript'></script>
(Note the URLs have been modified, to prevent search engine indexing of a potentially malicious domain).

Use of a text proxy, such as Rex Swain's HTTP Viewer, when run from any browser, will allow you to safely examine the blog source, without interference by the redirecting code. In this case, simply load your blog using the URL, then use the browser test search, for "scrapur", in the proxy log. This will let you see if the code in question is part of an HTML gadget - or it is installed directly in the template.

As with many reported hijacks, access to the Blogger Layout and Template wizards appears to be affected. If you need to remove this code from your blog, you may find yourself unable to use either the Layout wizard (to remove an identified gadget) or the Template wizard (to remove directly installed code). In this case, you will need to use Firefox with Noscript - or a similarly well protected browser - to prevent the redirecting code from executing.

After removing the identified code from your blog, as always, clear cache and restart the browser. Finally, I'll remind you again, to please be particular - only install third party code from trustworthy providers.

>> Top

Thursday, November 8, 2012

You Cannot Have The BlogSpot URL With Your Business Name, If That URL Is In Use

We see the naive queries by small business owners, in Blogger Help Forum: How Do I?, about setting up a blog with their business name, too frequently.
The BlogSpot URL for my business is in use. Can Blogger have it re issued to me?
and
I own "xxxxxxx.com", can Blogger give me "xxxxxxx.blogspot.com" so I can publish my Blogger blog to match?
These are all people who do not understand the reality of the Blogger policy
First come, first served.


If somebody already owns the Blogger blog with your desired URL, it's their blog - and it's their blog until they tire of owning it.

The Blogger "Create a blog" wizard assigns BlogSpot URLs based on availability - and it identifies unused URLs in real time. How quickly could the wizard work, if it was required to search every country business directory worldwide, before assigning an unused URL to a person trying to setup a new blog?

What would happen if a business owner from England demanded a required BlogSpot URL, which was in use by a business owner in the USA? Should Google setup a URL assignment court, for deciding upon the merit of anybody demanding a given BlogSpot URL?

If you seriously believe that the identity or reputation of your business is threatened by the existence of a Blogger blog which you don't control, and you can convince a judge of that fact, then you (or your lawyer) can serve a properly issued court order to Google. That's not going to get you the BlogSpot URL of your dreams, unfortunately.

What a court order will get is a deleted blog, with the URL locked to the current owner, for eternity. And neither of you will have a blog, published to that URL.

>> Top

Accessing The Registrar's Domain Manager, After Using "Buy a domain"

Setting up a custom domain, and publishing a blog to a non BlogSpot URL, is a simple enough task - when we are able to use the "Buy a domain for your blog" wizard.

Sometimes, after using "Buy a domain ...", we may still have to access the registrar's Domain Manager wizard - maybe to setup additional hosts, or to use the domain with non Blogger services.

When we use "Buy a domain", along with setting up the domain for us, the Blogger / Google wizard sets up a new eNom or GoDaddy domain owner account. To let us later login to eNom or GoDaddy, the "Buy a domain" wizard saves the login information, for our new account - in a Google Apps desktop wizard.

Here is yet one more reason why we absolutely must setup the provided Google Apps account, after receiving the Google Apps email. Be aware of the oddities of the Google One Login wizard, and Google Apps, when logging in.

The process of managing a domain, when setup using "Buy a domain", is not too complicated.
  1. Setup a new Google Apps account. Since free Google Apps accounts are no longer offered, you'll have to setup a Trial - or limited function - account.
  2. Login to Google Apps.
  3. Retrieve the Google Apps registrar login information, from "Advanced DNS settings".
  4. Login to the registrar (eNom or GoDaddy).


With later domains, purchased using "Buy a domain", you may simply have to activate the "bloggeradmin" account, for your domain.

The domain owner registrar login information is right there, in "Advanced DNS settings".


The domain owner login information is in the Google Apps desktop.
  1. Go to "Domain settings" - "Domain names" - "Advanced DNS settings".
  2. Open a new browser tab or window, clicking on "Sign in to DNS console".
  3. Copy the Sign-in name, and the Password, to the appropriate boxes on the sign-in dialogue, and click "Login".
  4. This will put you into the Domain Manager wizard, for the new domain.


If you already had an eNom or GoDaddy account, that will be a separate account - but with this new account maintained for you, by Google.

Just keep your new Google Apps account accessible and active, and keep the domain registration up to date - and you'll have no problem accessing the Domain Manager wizard, and managing the domain, whenever you need. And do not transfer control of your Blogger blogs, to accounts which require Google Apps, without understanding the risks.

Saturday, November 3, 2012

Use Third Party DNS Servers, For 1And1 Domains

Not all registrars are able to support the new Blogger domain ownership verification requirement.

Some registrars won't allow a second "CNAME" in the same subdomain - and others can't handle the excessively long target address. Ever since Blogger added domain ownership verification, we've been seeing complaints from some blog owners, who have purchased domains directly from registrars who can't provide the required DNS addresses on their servers.

Even though not all registrars have DNS servers that will provide the right DNS address entries, most registrars will allow us to use third party DNS servers. The use of publicly available DNS servers, which can provide the required DNS addresses, will eliminate the need to transfer domain registration - when the registrar is unable to provide the right DNS addresses, using their own servers.

If you're trying to setup your domain, purchased from 1And1 or a similar registrar, you need only to setup a suitable third party DNS server.

If your registrar limits their services, use a third party DNS host.

Use of a third party DNS host will also help victims of the eNom DNS Infrastructure problem - and those who purchased Name Registration, directly from the registrar.

An explanation of the solution is provided, by Blogger Engineers.

Marc Ridey, of Blogger Engineering, provides How to setup your Blogger blog with a custom domain from 1and1.com, and adds three simple steps to the normal third party registrar domain setup process.

  1. Setup a (free) ClouDNS account.
  2. Setup your normal DNS addresses (plus the domain ownership verification "CNAME", if required) in ClouDNS, using the ClouDNS Domain Manager wizard.
  3. Setup your domain, using your registrar's domain manager wizard, pointing to the ClouDNS DNS servers.

Do each step, one at a time - and check your work.

When you update DNS addresses, such as adding additional hosts, and ownership verification, you use the ClouDNS Domain Manager wizard.

Note the caveat, for advanced domain owners.

If you are using your third party registrar because you have non Blogger services (a web site, email, files, or other service) hosted by the registrar, please note the warning by Marc!
Warning: If you are using 1and1 hosting services to display a website as well as a Blogger blog, these instructions will disable the website. Please post a comment with your website address and I'll check how these instructions must be updated. If you're using eMail, remember to complete the optional eMail step.

Note that ClouDNS, when setup, may offer the option to redirect the domain root (aka "naked domain") to the "www" alias (or whatever DNS address you may setup). For best results, ignore that option, and use the Blogger or Google Apps redirect.

There are still only three acceptable DNS models - use of ClouDNS, or any similar third party DNS host, will not change that.

This may not be a perfect solution - but it will produce a stable domain.

This may not be an ideal solution for the problem - it introduces a bit of complexity into the domain setup process. This will allow owners of newly purchased domains from 1And1, Network Solutions, and others to get their domains verified, and get their blogs online again.

Since this starts with blog owners who elected to purchase their domain directly from a registrar - and setup the domain themselves - maybe it's not too much, technically.

http://blogging.nitecruzr.net/2012/11/use-third-party-dns-servers-for-domains.html Use Third Party DNS Servers, For Domains Registered By 1And1, And Similar Registrars