spam Archives - Neil Turner's Blog

AboutMy.email

May 27, 2024 by Neil Turner

So, now that I’m sending out email newsletters, I need to be sure that people will actually receive the emails. Because email spam is still a problem after all these years, the big webmail providers have strict requirements to ensure that email reaches their user inboxes, and AboutMy.email is a really simple testing tool.

When you open the web page, you’ll be given an automatically generated unique email address. All you need to do is send an email to this address, preferably by adding it to your email list. Once the email comes through, AboutMy.email will analyse it, and let you know what you need to improve.

I had already set up DMARC, DKIM and SPF on my domain, and so, as you can see from the screenshot, it scored quite well. Other things that I’ve gained points for are my site having an IPv6 address, and using TLS for email connections.

To improve the score further, I’ve subsequently added a BIMI record, and need to look into adding unsubscribe headers from my emails. But it’s a very good start, and should reduce the chances of my emails ending up in user’s spam folders. I like how simple AboutMy.email is – you don’t need to register an account, and there’s no spam follow-ups afterwards (which would be ironic I suppose).

Silencing unknown callers

January 24, 2024 by Neil Turner

Screenshot of the iOS option to silence unknown callers

My recent calls list, showing lots of missed calls from numbers not in my contacts

Over recent weeks, I’ve been plagued by calls from numbers not in my contacts. Sometimes, as per the screenshot, I’ll get three calls from three different UK mobile numbers within seconds of each other. So, I’ve enabled Silence unknown callers on my iPhone.

I made a mistake by answering the first call, and it turned out to be some kind of cryptocurrency scam. However, it wasn’t just a random dial; they had my name and email address as well as my phone number. This suggests that they’ve hoovered up my personal data from a previous breach – possibly the Patreon breach of 2015, but there have been many others.

Since then, I’ve been getting three or four calls at a time, usually twice per day. It’s a different number every time, so whilst I may have not been fully convinced it was a scam when I answered the first time, I am convinced now. I’ve tried to hide the numbers in the screenshot because the numbers have almost certainly been faked and probably belong to innocent people. It also suggests to me a deliberate effort to get around call blocking apps like Truecaller, for which I have a premium subscription.

What this means is, if people call me, my phone will only ring if the number is in my contacts, if I’ve called it recently, or it’s a ‘Siri suggestion’. The latter could include numbers in recent text messages and emails, for example.

If you want to enable this yourself, open Settings on your iPhone, go to Phone and then scroll down to ‘Silence Unknown Callers’.

I’ll keep this on until the random calls stop. At the time of writing, they’ve slowed down but haven’t stopped completely. Maybe they’ll get the hint in time.

Comment Spam strikes back

November 20, 2023 by Neil Turner

An illustration of a robot turning web pages into canned meat product. Generated using Bing AI Image Generator

So now that I’m blogging again, it’s the return of comment spam on my blog posts.

Comment spam has always been a problem with blogs – ever since blogs first allowed comments, spam has followed. Despite the advert of the rel=”nofollow” link attribute, automated bots still crawl web sites and submit comments with links in the hope that this will boost the rankings in search engines.

In the early days of blogging, blogs often appeared high in Google’s search engine results – by their very nature, they featured lots of links, were updated frequently, and the blogging tools of the time often produced simple HTML which was easily parsed by crawlers. So it was only natural that those wanting to manipulate search engine rankings would try to take advantage of this.

I’ve always used Akismet for spam protection, even before I switched to WordPress, and it does a pretty good job. Even then, I currently have all comments set to be manually approved by me, and last week a few got through Akismet that I had to manually junk.

Humans, or AI?

These five interested me because they were more than just the usual generic platitudes about this being a ‘great post’ and ‘taught me so much about this topic’. They were all questions about the topic of the blog post in question, with unique names. However, as they all came through together, and had the same link in them, it was clear that they were spam – advertising a university in Indonesia, as it happens.

Had it not been for the prominent spam link and the fact they all came in together, I may have not picked up on them being spam. Either they were actually written by a human, or someone is harnessing an AI to write comment spam posts now. If it’s the latter, then I wonder how much that’s costing. As many will know already, AI requires a huge amount of processing power and whilst some services are offering free and low cost tools, I can’t see this lasting much longer as the costs add up. But it could also just be someone being paid using services like Amazon Mechanical Turk, even though such tasks are almost certainly against their terms of service.

I think I’m a little frustrated that comment spam is still a problem even after a few years’ break from blogging. But then email spam is a problem that we still haven’t got a fix for, despite tools like SPF, DKIM and DMARC. I’m guessing people still do it because, in some small way, it does work?

Akismet and Data Protection

April 3, 2026August 24, 2006 by Neil Turner

In Britain, we have this law called the Data Protection Act, which dictates what companies and organisations can and can’t do with data about its customers, clients or employees. It basically puts a duty on organisations to ensure that a person’s data is kept private and cannot be compromised, that the person is aware if that data is being shared with third parties (and seek their permission if needed) and that the person is aware if data is to be processed in another jurisdiction, where data protection laws are not equivalent to this act. There’s more to it than that – Wikipedia goes into more detail and the full text of the act is here.

So how does this relate to Akismet, the spam-filtering web service that I conveniently mentioned in the title of this post? Well, I use Akismet on this site as a way of stopping spam (though to be honest it’s been largely redundant since I started using Comment Challenge). This site is based in the UK, and therefore falls under UK law, but Akismet is a US service, and right now every comment submitted (bar those from approved TypeKey and OpenID commenters) is being sent through it.

Though I haven’t yet got a privacy policy on this site – it’s something I’ve been working on now and again for some time – this does bring up some privacy implications. Without Akismet, the privacy policy would say something like this:

Upon submission of a comment, the details provided (name, email address, URL and comment), along with your IP address, will be stored in a database. Your comment will also be displayed publicly on this web site.
Any comments you have made can be removed at any time, by contacting the site owner and requesting their modification/removal.

With Akismet brought into the equation, we have to add the following:

The details you submit will also be sent to the Akismet service, for the purpose of identifying possible spam comments. Akismet is based in the United States of America and falls under the laws of the State of California. The details submitted will not be stored, unless the comment is marked as a ‘false positive’ (a legitimate comment which is automatically identified as spam) in which case it may be stored for some time for diagnostic purposes.
For more details, please consult the Akismet Privacy Policy.

Now I’m not a lawyer and my experience with data protection mostly comes from a university module that I took recently, so this is certainly not legal advice. But it’s something that I hadn’t thought about until reading an email from the Six Apart Professionals Network this morning.

Akismet is done by the WordPress guys and I’m sure they’re trustworthy, and it’s also not entirely fair to pick them out as this could be any other web service – it just happened to be the topic of conversation at the time. But while a few bloggers using it isn’t going to cause much of a kerfuffle, a big organisation could land themselves in hot water if they’re not totally upfront about what is happening to their users’ data.

Why Thunderbird is better than OE

January 12, 2025August 16, 2003 by Neil Turner

You may have heard that despite reports earlier in the week, Microsoft will still develop Outlook Express after all. But unless Microsoft pull off something truly remarkable, I’m not going to switch back from my beloved Mozilla Thunderbird. And what’s more, I’ve given you a list of reasons why I’m not switching, in no particular order 🙂 .

Themes – bored of the normal look? Change it. 10 themes are already available and it’s only at version 0.1
Extensions – add on extra features without using shell hooks (like OEQuoteFix uses).
Junk Mail filtering – considering OE is the world’s most popular mail client, I’m surprised this isn’t already in. But it isn’t. Thunderbird uses Bayesian filtering which is one of the best forms.
Better message filtering – much more powerful than the rather basic filtering in OE, and easier to use too! Great for adding a filter to mark out mail that SpamAssasin thinks is spam, since you can specify custom header matching.
Not full of security bugs – I can open an email infected with Klez and know that I won’t be automatically infected. And not a security patch in sight.
HTML Sanitization – you can either view HTML messages in their full glory, or with things like images and CSS removed so that your address cannot be tracked as easily. You can even view them all as plain text.
Sanitization for Junk Mail – if you like pretty messages but still want privacy, you can enable sanitization only for emails marked as junk.
Cross platform – you probably could run OE in Wine on Linux, but this baby runs natively on Windows, Linux and Mac OS X. And it’s already being ported to all manner of other OSes.
Text Zooming – it’s been nearly a year since I used OE properly so I can’t remember if it does this, but if IE is anything to go by, even if it did it wouldn’t do it properly. You can make text larger or smaller in all emails, whether they use CSS or not. Great if your aunty sends everything in 64pt fonts.
Automatic folder compression – those DBX files can get awfully big in OE, even if you delete all your mail. Thunderbird can compress them automatically, rather than waiting for you to do it yourself.
Javascript Console – I’ll but good money that OE will never have this feature.
Three-pane vertical layout – Outlook has this, but OE does not. But Thunderbird does 🙂
Customisable start page – Yes, you can change it in OE but only by going into the registry or using X-Setup (a blatant plug because I wrote that plug-in myself 🙂 ). Thunderbird has it on the opening tab of the Options dialogue.
On-screen alerts – You can have it pop up a message near the system tray when mail arrives. Handy that.
Message labelling – Have important emails marked as red, or personal ones marked in green, although naturally you can change the colours easily. And you can set mail filters to do this automatically.
Graphical emoticons – MSN Messenger has this, why doesn’t OE?
Spellchecker – yes, OE has it but in some cases it’s buggy. And you can also change the language without buying a new OS.
Doesn’t get hijacked – one of my ISPs decided to add an ‘Infobar’ to the bottom of OE once, taking of valuable screen real estate. And then there was the Hotmail advertising bar, and the ‘Outlook Express provided by…’. Yes, again X-Setup can fix those but how many users in the world have X-Setup? Probably about 0.1% or something.

I’ve probably missed many others, but that’s 18 features that I personally find useful that OE doesn’t have. Are you convinced yet? 😉

Added: meanwhile, there’s a guide for switching from OE to Thunderbird, complete with screenshots and very simple instructions. Check it out! 🙂