We all have a mischievous side. I know I do. And in that vein, I have a great idea for a PubCon or SES segment. I'd appreciate some feedback in the form of comments if you'd like to see such a segment. Then I can approach Danny Sullivan or Brett Tabke with the idea:
Title: "Understanding Black Hat SEO: Protecting Yourself From Black Hat Vulnerabilities"
The segment would cover the basic black hatter's psyche, and what he's after. I'd go through the list of common tactics used, and procedures for auditing your application for such vulnerabilities. Then I'd explain how to solve or mitigate the problems. These include:
1. HTML injection
2. Systematic comment spamming
3. Dropping links in forums that don't implement nofollows
4. Using software signatures to find vulnerable applications
5. Hacking: XSS, SQL injection, using a vulnerable 3rd party application or shared hosting as a weapon
... and quite a few more ideas; that's just a quick list!
I had this idea awhile ago, but Barry's mention of a hacker using Jennifer Convertibles as a launchpad for spam highlights the importance of understanding what makes spammers tick. And understanding that, among other things might also stop you from saying:
I used to work for RustyBrick as a programmer, and they're actually pretty good on security as web development firms go. I'm impressed that Barry is disclosing the details, but I do suspect it will have more to do with their hosting, not RustyBrick's application.
So if you're a black hatter, you can leave a comment telling me how much I stink.
But if you think this is a great idea, and you want me to run with it for PubCon or SES, leave a comment. Of course if you're Danny Sullivan or Brett Tabke, you can always contact me directly












October 25th, 2006 at 1:57 am
Great idea, hope many people will come!
October 25th, 2006 at 1:58 am
Great idea! I always see those posts "I used to rank so well in GYMA and now I'm on the 3rd page. What happened?". What most of them don't realize is that it's not necessarily and algorithm shift... especially if they are the only ones moving down.
It would be nice to get an overview and understand where my website is vulnerable, in addition, how I can determine if someone is sabotaging me via linking me to bad neighborhoods or what not.
Also a case study from being attacked to restoring the site would be a nice for an SES type of presentation.
Oh by the way "You really Stink"
October 25th, 2006 at 2:28 am
Great idea. I actually just had something about Black Hat research posted on Andy Beals blog for his contest.
http://www.marketingpilgrim.com/2006/10/most-seos-are-virgins.html
As I said in the article, knowledge is power. Whether you do the research yourself or learn from people who have, you need to know what's going on out there.
October 25th, 2006 at 3:41 am
This looks a lot like one of our chapters, Jaimie. Just don't give away our entire book, ok?
Great idea, btw.
October 25th, 2006 at 4:34 am
I would go to a session like this! Many of the sessions at these conferences are pretty much like overcooked noodles.
October 27th, 2006 at 10:15 am
I'm heading to Vegas and would definitely attend this. If Brett isn't interested, hell then let's just grab an s-load of beers an put a group of people together to chat after the sessions one day.
Another interesting topic might be, how to protect yourself from hackers while you're sitting in a Pubcon session using an open wireless connection (in Sin City no less).
November 3rd, 2006 at 6:03 pm
If this event doesn't make it to the main agenda we can just hold the session in the hotel bar. I'll definitely attend..