Blog

  • Mike Boyink on the problem with free ice cream

    Church Webmasters – Stop Working for Free!

    Mike Boyink implores “church webmasters to stop giving it away for free.“. Like many others, has concluded the only reward for free ice cream is complaints about the flavors. Mike also asserts that this lack of perceived value on the part of pastors and staff leads to re-spinning of style over sustaining long streams of substance.

    I’ve learned something interesting: if you give away ice cream, eventually a lot of people will complain about the flavors, and others will complain that you aren’t also giving away syrup and whipped cream and nuts. – Steven Den Beste – USS Clueless – Capitan’s log – final post.

    The above quote immediately came to mind after reading Mike Boyink’s well-justified rant today:

    Are you a web developer working on your church’s website on a volunteer basis?Stop it.

    Immediately.

    Walk away.

    Or start billing for your time, at rates competitive in the local market.

    Why?

    Knowing what Mike went through with the whole RidgePoint debacle I’m tend to agree.

    For example: Just recently I just helped out OnMission.com with an article on search engine optimization. They offered me a small honorarium but since they are part of the North American Mission Board I opted they keep the cash for those out in the field … and hoped they would provide me with a mere hyperlink.

    Instead, many of my thoughts wound-up being attributed to someone else in the form of an interview (with that someone else). Perhaps if I had invoiced them what my time, OnMission would have have made more of an effort to return the favor in the form of some electronic recognition (though my name is buried in the masthead, in an 8pt font some 47 pages away from the article). My mistake for not asking for the link up-front, their mistake for not understanding the worth of what they were given.

    Likewise in Mike’s post, I happen to know the church site he’s talking about and know they are about to make an expensive mistake … but worse, I think Boyink hits the nail on the head when speaking of the ‘great cloud of witlessness’ that is the Body online. Regardless of whether its FrontPage, Publisher or whatever the WYSIWYG toy-of-the moment happens to be, Mike is dead right when he writes:

    I’m seeing a pattern here, and it angers me. It angers me that, as the church, we can always find the time and motivation to re-implement a site on a different backend, or change the site architecture, or implement new navigational widgets.But try…just try…to find someone to invest that same effort in writing interesting, valuable content. Or documenting people’s stories for the web. Or talking at a strategic level about what the church should be using the internet for. Try it and you’ll get unanswered emails, unreturned phone calls, and blank stares in meetings.

    The emphasis is mine, but I suspect its an accurate assessment of what’s being yelled at on the other side of Mike’s computer!-)

  • What we can learn from Michael Dell’s $99.5M purchase of Red Hat debentures

    What can we learn from Michael Dell’s $99.5M investment in Red Hat? Personally what I walk away with is a sense of bewilderment. Not that anyone would spend so much on such an excellent operating system, but that Red Hat would spend so much time creating a paragon of usability and accessibility in the form of their corporate website and not keep their news pages up-to-date; and forget to take advantage of free advertising in the form of a syndication feed.

    snips from Red Hat's home and news pages

    From time-to-time I’ve received some grief for being too blog-centric when it comes to church web sites, but I think as we hurtle down the road to mega churches in a media-frenzied, instant news world, we should take note of Red Hat’s glaring omission and avoid doing likewise.

    Consider this, Red Hat has a website that would probably make nearby native Mark Pilgrim giddy with ‘Dive Into Accessibility‘ glee. It’s clean, it’s colorful, it’s all CSS and all usable – heck I’d even bet the farm that it’s data-driven. So why not then create a simple RSS or Atom feed of news items the Red Hat new page? This would give people the opportunity to auto-discover them via their aggregators – and search engines an additional point of entry.

    Similarly on your church websites, if you’re posting recent events and sermons as a means of providing continually changing compelling content – and I hope you are – then you need to make sure to take full advantage of the rapid infusion of aggregators into everything from ipods to browsers. Considering the relatively low-cost of as creating a simple syndication feed and embedding an alternate content link tag on all of your church website’s pages, what have you got to lose? Consider what you’re losing by not doing this!

    Anyway, that’s my ‘content is king’ lesson and/or ‘substance over style’ sermon from the real World today. What are your thoughts?

  • What is RSS?

    The United Church is the largest Protestant denomination in Canada offering not only a rich history, but one of the easiest to understand answers to the question: “What is RSS?

    I gotta tell ya folks, there are nominal denominational websites and then there are definitive denominational websites. United-Church.ca falls into the latter category. Accessible, informative, internationalized, usable, easy-to-navigate. Good stuff, and worth exploring in greater details (hint, hint).

    But for today, let’s just look at their not-so-geek description of RSS … and how they are consumed:

    RSS (Really Simple Syndication) is a format for delivering summaries of frequently updated website material such as news releases and other announcements, forthcoming events and programs, etc.

    Many news and advocacy sites syndicate their content as RSS feeds in a data format known as XML that a RSS reader (also known as “news aggregator”) interprets and displays.

    An aggregator is a software program similar to a web browser that lets you read the headlines from many sites at one time. You simply plug in the web address (URL) of the RSS file you want, such as one of the United Church of Canada feeds …

    For many of you into blogging the above definition is nothing new, but for those of you whose church website development comes along more traditional lines, what this all means more and more individuals are not visiting your website to see what is new, but are instead using aggregators to inform them when a site is updated and with what. If it helps, you can think of RSS aggregators in the same way described by Jonathan Dube of Poynter Online: “Your own personal Web butler.”

    If you’re still not convinced that your church website needs to syndicate then my suggestion is that you take advantage of any one of a number of client-based aggregators such as FeedDeamon and NewsGator, or equally useful web-based aggregators such as BlogLines.

    What you’ll see is that without actually visiting the site, you can keep track of literally hundreds of sites simultaneously. Hopefully once you see how this can and is changing the face of how we track online information, want to do is figure out how to syndicate your pastor’s sermons, the weekly newsletter and/or your events calendar.

    When that happens, hopefully by then I’ll have an article on how to do this. In the meantime, if you’ve got some ideas or questions along these lines, leave a not in love. And please, no wise-cracks about me acknowledging the fact that there are Canadian Christians – with good websites even!

  • One in Three Adults Is Unchurched Means 1 in 3 Adults Don’t Church Speak

    The Barna Group Reports that “Despite widespread efforts to increase church attendance across the nation, the annual survey of church attendance conducted by The Barna Group shows that one-third of all adults (34%) remain “‘unchurched.’” They go on to say “That proportion has changed little during the past five years. However, because of the nation�s population continuing growth, the number of unchurched adults continues to grow by nearly a million people annually.” (Hat tip to Mundy’s Musings on Christianity.)

    Mega Church Muddle

    Rowland Croucher, the Director of John Mark Ministries writes:

    “But why are evangelical or conservative or charismatic/Pentecostal churches – particularly ‘megachurches’ – holding their own or growing? Simple: musical chairs – ‘church hopping growth’. One survey in the U.S.: ‘more than 80%’ is transfer growth; another in Canada: only 5.5% of church attenders come from an unchurched background.”

    While the emphasis on ‘unchurched background’ is mine, the point is clear – the 21st century Church is failing to fulfill the Great Commission, and part of the blame has to do with the Body’s emphasis of style over substance, both from the pulpit and via the HTTP protocol.

    Got Milk?

    “About this we have much to say, and it is hard to explain, since you have become dull of hearing. For though by this time you ought to be teachers, you need someone to teach you again the basic principles of the oracles of God. You need milk, not solid food, for everyone who lives on milk is unskilled in the word of righteousness, since he is a child. But solid food is for the mature, for those who have their powers of discernment trained by constant practice to distinguish good from evil.” – Hebrews 5:11-14

    The warning of the above passage is a warning to the modern day church, mega or otherwise. Consider this snippet from the aforementioned Barna study:

    “The belief profile of unchurched Americans veers from mirroring the beliefs of most Americans to differing substantially. The unchurched are similar regarding their contention that Satan is a symbol of evil but not a living entity (67% believe this); that if people are good enough they can earn their way into Heaven (61%); and that Jesus committed sins during His time on earth (51%).”

    Then combine that with a past study by the Pew Internet & American Life Project which finds:

    “Nearly two-thirds of online Americans use the Internet for faith-related reasons The 64% of Internet users who perform spiritual and religious activities online represent nearly 82 million Americans … The survey provides clear evidence that the majority of the online faithful are there for personal spiritual reasons, including seeking outside their own traditions, but they are also deeply grounded in those traditions …”

    In Other Words …

    Putting this all together, it is my assertion that the Body has stopped growing because the Church has forgotten a simple tenet of good web design – that is Content is King – both online and in the pews.

    Style over Substance

    “The internet is a place where absolutely nothing happens. You need to take advantage of that.” – Strong Bad, Email #51.

    Just as some argue that part of the problem with getting unbelievers in the door has to do with “Church Growth Movement‘s” wrongly focused on counting heads – I think a large part of the problem with church websites is that they incorrectly focus on either ‘looking good‘ or hit counts.

    Not convinced? Let’s go back and take a look at JesusIsLord.com. For all the ‘love notes’ I received over my original review of this site, it still remains as an uninvested talent in the form of a domain name that might as well be hidden in a tin-can on the ground because it remains focused on leading people to Christ – leaving them to their own devices once they’ve prayed the prayer. There is nothing here that answers the tough questions, just a few hyperlinks that ‘hand-off’ a would-be disciple in the fashion of Jack Chick.

    Here’s another example from our archives, Montrose Baptist Church Rockville Maryland – who has overcome their ‘under construction‘ issues only to push a home page “Jesus Junked” with fluttering flag animations and a mission statement that might as well be Greek to someone who’s unchurched. Instead, what this particular church needs to do is offer some solid expository to the exploding South American/Hispanic community moving in about their premises. I’m sure that community has specific spirital needs – why not address them with some onlin sermons and or Bible studies?

    One other sampling from the great cloud of witlessness that is the church online – the recent spait of angry emails incoming from fans of the ‘McClean’ Bible Church, McLean VA. Among the most irate of emails is the continuing theme that “God doesn’t care if you use Flash ineffectively, so long as you use it sincerely …” To those folks, I suggest they go back and read both the recent Barna report and Pew study.

    What This Means for Your Church Website?

    Folks, I’ve been commanded by God to chant this mantra until the cows come home (or until I run out of metaphors, whichever comes first). The purpose of your church website design isn’t to look cool, isn’t to get listed as ‘the best church web site’ or the ‘coolest church website’ as indicated by the number of Google queries to this site using those key words:

    Selected 2004 Stats
    search key phrase Count
    cool church websites 181
    cool church website 31
    cool church 27
    cool church web sites 25
    coolest website ever 16
    coolest church websites 11
    cool church sites 8
    coolest church website 6
    the cool church 16
    Selected 2004 Stats
    search key phrase Count
    good church websites 45
    good church website 19
    good church web sites 13
    good church web design 6
    good church web site 5
    best church websites 35
    great church websites 26
    best church web sites 25
    awesome church websites 21

    Rather, the purpose of your church web page design is to convey the Christ that is in your congregation to the World by addressing their needs AND by discipling them with the solid food of the Gospel.

    If you do both these things then I can guarantee that you will not have to spend $5k on a Search Engine Optimization (SEO) expert, nor will you have to worry about justifying your church’s online marketing expenditures.

    I personally think know from measurable successful personal application of SEO-related study, this is done by getting enough compelling content in the form of upcoming events, ministry explanations and sermons to get them in the door – while others argue in favor of a more ‘Virtual Church.’ Like all good debates, the answer is probably somewhere in between.

    In short, if you write it they will come … so get busy!

  • Church of the Spinning Animated Gif

    As I wander about the great cloud of witlessness that is the church online I often wish that’d I win the lottery or something so I could spend the rest of my days on God’s green Earth healing church web sites, feeding the information hungry, and leading lost souls online to a better way at leading lost online souls to Christ. But that would mean having to take up gambling (or something) so the best I can hope for is enough spare time to redirect earnest but errant church webmasters through the narrow-path of usability.

    Case in point is the New Life Vineyard Fellowship of Birmingham, AL.

    A Confusing Conundrum

    First let’s talk about earnest and effective redirection. Somewhere between September 2000 and May of 2001, it appears the church changed its domain from vcfbham.org to lighthousevineyard.org – without apparently (note I said apparently) changing the name of the church. Then it looks like the church, I’m guessing somewhere between 2003 and 2004, the powers-to-be changed the name of the church, only this time, they were fortunate enough that the Granite Creek Community Church was no longer using their domain – which now matches the name of the church: http://www.newlifevineyard.org

    Now I’m not against churches changing names or domains, though I do strongly feel that the domain name should closely either match the name of the church, or match the church’s 1 line catch phrase and/or slogan.

    Rather, one of the primary healing topics I wanted to discuss was how to successfully redirect individuals to a new site – and/or have multiple domain names aim at the exact same site.

    Redirecting the Lost

    On Linux systems, the most direct and most effective way to do this is through the mod_rewrite mechanism – specifically by modifying the .htaccess file to read something like this:

    RewriteEngine On
    RewriteCond %{HTTP_HOST} ^(www.?)oldsite.com$
    RewriteRule ^(.*)$ http://www.newsite.com/$1 [R=301,L]

    Through the magic of regular expressions, the above snippet merely replaces the old URL with a new URL, while (presto-chango) keeping any and all query string arguments the user may have entered. While this can also be done programmatically – I prefer the .htaccess route as it tends to keep my well indexed sites, well, well indexed.

    That said, not everyone has the expertise to do this, and since I’ve already shown you a Linux solution AND since today’s example is running on an IIS server, one sure-fire way to handle a redirect is to create a default.asp file that reads as follows:

    <%
       sQS = trim(Request.Servervariables(“QUERY_STRING”) & “”)
       if len(sQS) > 0 then sQS &= “?” & sQS
       Response.Redirect “http://www.newlifevineyard.org/Default.htm” & sQS
       Response.End();
    %>

    The reason I’d use server-side .ASP versus client-side Javascript is that a server-side works regardless of the user’s browser & configuraiton, and in most cases redirect appears to the user immediate. This as opposed to client-side redirect built-into the HTML generally does not — well, I take that back — if you keep the page small and fire-off a simple single line of JavaScript without too much fanfare or graphics on the old page then you can probably get the same “immediacy” impact you get w/server-side execution; e.g.:

    <script language=”javascript”>document.location=http://newurl.com/</script>

    If that fails, you need to make sure there is a <noscript> solution that includes the “refresh” meta tag to get the job done. If there is an HTML solution in your future, don’t forget to neglect what’s between the <title> tags as well.

    Today’s example uses a JavaScript solution, but puts it on a timer. Now this isn’t so bad at first – that is to tell users that there’s been a change. But now that the change has been in effect for some time now, it is probably time to ditch the delay.

    Church of the Spinning Animated Gif

    Those of you who regularly read my rants about Jesus Junk know my feelings about the ubiquitous spinning cross found on so many church websites … but just in case you haven’t heard this one “if your church doesn’t have a spinning gold cross on its steeple, then you’re not allowed to have one on your website.

    While the New Life Vineyard Fellowship (NLVF) is thankfully devoid of Cross Kitsch, they’ve got just about everything else. Well, okay, that’s an exaggeration but the does employ those irritating spinning email icons that StrongBad makes fun of in episode #51 simply entitled “website.” If you haven’t viewed this very good piece of Flash Animation – do so now – keeping in mind it is a parody of what not to do.

    Along with spinning email icons is a flashing “upcoming events.” Now one of the reasons this site needs to “flash” its users is because of the overuse of fire engine red, an eclectic mix of navigation, and some colors and background combinations that make the site look as if it was developed back in 1997.

    If you’re using MSIE, you also have to deal with “page fades,” “drop in text” and a few other page transition type tricks that may seem neat at first, but tend to annoy regular repeat visitors – provided you have any after abusing their bandwidth with such silly stuff.

    Style over Substance

    Now here’s what really gripes my cookies about the NLVF’s web presence – and makes me wish I could heal such sites on a full-time basis: they have done the difficult task of organizing their content and making a fairly compelling of why someone should attend on Sunday. But then they go and hide their light under a bowl of gizmos and garishness that could be easily overcome with a simple off-the-shelf template for FrontPage or DreamWeaver, or via a blogging mechanism such as MovableType and/or Expression Engine.

    Here’s what I’d suggest to the NLVF webmaster – visit other sites, successful sites, that quickly and easily instruct a new user where to go, and don’t encumber repeat visitors with little nifties that only server to detract from the message. Moreover, I’d take care of some real issues such as adding TITLE and ALT arguments to hyperlink and image tags – I’d also get rid of confusing navigation such as clicking on Pastor Lamar’s “John Wimber-like” face and getting a page that contains a singular image that says “building for sale.”

    In other words — and feel free to quote me on this — unless your church hires a Chinese plate twirler to perform while your pastor is preaching, then you’re not allowed to add other show-boating gimmicks and side-shows that have little or no relevance to the purpose and personality of your church and its online message.

    How about you? Agree, disagree? What else would you do to heal this church website?

  • Usability and the Harris Teeter’s self-checkout carousel

    “Self-service checkout systems have to be flawless. It only takes one bad experience to create an an ex-customer” – Gotcha! The Problems With Self-Service Checkout Systems, Baseline.com

    Four bottles of Harris Teeter seltzer, slab-o-jarlesberg lite, some rice-cakes, box-o-ZipLoc, I’m ready to check out and head home for a relaxing Sunday evening … that is until I ran into one of them automated, U-Scan, self-service checkout carousel contraptions. I press the “Start Here” icon on the screen and then obediently swipe my Harris Teeter VIC savings card key fob thingie … I carefully remove a 33.8 oz bottle of sodium-free, caffeine-free mandarin orange seltzer so as not to tip the hand basket … which is too large for the surface provided for me at the convenient self-service checkout robot. I swipe … nothing … nothing … nothing.

    Clerk walks up and tells me I need to start over again and swipe my key fob again. I look down the aisles and think I might have a better chance with a human … no luck, only 2 lanes and backed-up by other individuals avoiding an interface with frustration.

    Back to a different machine to “Start Here,” card swipe, and then again with the bottle – only now my wife is there to make sure the basket doesn’t teeter off the squirrel-sized perch. Nothing happens. My wife tells me I’m not doing it right, but I look at the scanner and I can see that someone with some sloppy milk has fouled the scanner. A different clerk walks-up, yanks the bottle from my hand and holds it over the scanner – waits two seconds, completely still – two seconds later – beep – he walks away without saying a word – his disdainful body language screaming ‘moron.’

    I call over to him “do I have to do this [wait 4 seconds routine] for each item?” He looks at me then looks down at his command and control console ignoring me. So like a good monkey, I also hold a bottle over the scanner in stop-action animation style similarly simulate the clerk’s wordless instructions to successfully get it to beep after another 5 seconds of my life have been wasted due to a dirty scanner.

    Having already tried to get the help of the clerk both in word and with a kind wave, I drop the seltzer into the bag – hoping the thump will finally get the clerk’s attention so he’ll at least give me some Windex and a paper towel to do the dirty work myself – after all, it’s not like Harris Teeter isn’t already paying me to do their work. The clerk briefly gives me an admonishing glance then finds something else important to look at.

    More slow-motion scanning until I get to the rice cakes. I scan them, put them in the bag and get “please wait for assistance.” To me its clear that the 3.52OZ of the Quaker Rice Snacks didn’t register on the anti-theft scale. Instead, said clerk startlesmy 5-year-old daughter – putting his hands on her shoulders and asks her not to touch the carousel – which she wasn’t doing. An action towards a defenseless member of my family that might have earned said individual a whole new checkout experience had I not been a peaceable man of God.

    I take the rice cakes out and place them in the bag with a bit more velocity than usual. That worked!

    Now comes the bananas – of course I have to squint at the screen and look for a picture that doesn’t display anything as common as the banana. Instead have to guess “miscellaneous fruit” out of a choice of 5 or 6 other blurry and overcrowded 150 x 75px collages of tropical delicacies with not-so-descript black labels against a dark green background.

    Finally the ZipLocs. I’m almost done but what I didn’t see was that as I was scanning the box, my wife was simultaneously removing the bananas into a second bag. Again, “please wait for assistance,” again the clerk walks over with his arms again aimed at my daughter’s shoulders – she cowers towards mommy until I bellow not to touch her and shoot him an expression I haven’t conveyed since riding on the double-G train through the bad parts of Brooklyn at 3 PM some twenty years ago. The young man sulks away, unsure of why I’m upset.

    So what has this got to do with Church websites?

    Glad you asked, it all boils down to customer-centric, servant-hearted usability. If your church website forces your readers through a similar set of flaming hoops, then you can expect fewer return visits and emptier pews. For just as I’m inclined to take my shopping business across the street, so too may seekers dissatisfied with your online presence take their gifts and talents elsewhere.

    For example, in doing some research I found an interesting pattern. Trade magazines tout these self-service checkouts and time-savers, sometimes quoting happy housewives as they breeze through the checkout line at Jeff Gordon speed. Yet when I add the word usability to my search phrase, I find several articles and comments bagging on the coupon belching behemoths, along with one post by a clerk whose job it is to “monitor four simultaneous transactions, handling problems, making change, monitoring security, teaching the newbies, helping the eternally clueless …”

    Hmmm … so that’s how they perceive me? Perhaps that’s why Harris Teeter has at least for the duration of our transaction hired me, an experienced and hopefully better-paid systems analyst/usability expert to do their job? But I digress. Point #1, don’t treat your users like idiots. They’re usually better trained, better educated and have more of a clue than you think – but even if they’re not, they’re still the ones who put the money in your paycheck … or collection plate.

    Along those same lines – work to solve the customer’s problems – don’t tell them yours. The HT clerk had no business touching, my daughter let alone accuse her of something she didn’t do. His job was to facilitate my shopping experience, not make me feel like a moron nor my daughter feel like she was a ‘bad girl.’ Train the people who maintain your church website that the customer comes first – or at least remind them that machines were made to be the servants of men and not the other way around.

    Third, keep your equipment (and systems) maintained, clean and in good working order. Yes, I know the real reason we have self-service checkouts is because the one time cost of $24k + 4k in annual maintenance is still cheaper than hiring someone at $10/hour … it also cuts down drastically on theft, however there is no excuse for not keeping these machines working in top shape. I don’t mean to cry over spilt milk, but many, if not all of my frustrations could have been averted with some basic period maintenance. At least put a timer on the software that bugs the clerk to check the scanner after several consecutive failed – or overly long scan attempts.

    Fourth, spend some money on usability testing. I didn’t even get into the screens, but there are several stupid ‘Split-Focus‘ things like “Yes/No” buttons top-to-bottom that asks if you have any under my shopping cart, immediately followed by “Yes/No” buttons left-to-right asking if I have any coupons, followed by a matrix of colored buttons representing about 12 different payment types. Be consistent, in color, in fonts, in layout and in verbage. Similarly, do some other smart things like not asking me to press “Start Here” and then scan my card. Initiate a shopping transaction as soon as I scan my card. Likewise, after about 7 or 8 times, learn my language preference and default to it.

    I could go on along these lines, but I found several other articles that describe the usability issues in far better detail than I have time or space. For example, check out the experience of a usability expert over at ElectronicInk.com who evoked an AMEN out of me when he/she wrote:

    “The other day, I had to pick up a few items from the grocery. I was with my 4-year old son, I was in a rush and I thought that I would save a few minutes by using the new computerized self-service check out lines. The experience was nothing like I expected it to be…

    …I have enough stress in my life without being made to feel stupid at the checkout line in a grocery store!”

    Of course my favorite find was the following snarky comment on the topic at the “Ravings of an Intermittent Fool:”

    “I have not used – and WILL not use – a self-checkout aisle, until the stores provide me some sort of incentive (say a 10-15% discount on my entire purchase). My reasoning is that they are making ME do the job of the cashier, but they are still charging the same price as if they were paying a cashier. Until they spread the savings around, I will stubbornly stand in line to have my purchases rung up by a store employee.”

    Here are some other interesting articles on the topic:

    How about you? Like’m, hate’m, think they’re poorly designed? And would someone please tell me why these machines don’t use the hot-babe voice that came equipped with the computer on the Star Ship Enterprise (yes, I know, shopper demographics .. )?

  • Using .htaccess to deal with a recent flood of trackback ping spam

    “Holy smokes, I’ve been hit!

    My comment spam ‘secret code’ filter is working like a charm – no spam in weeks, but now they’ve decided to spam through trackback. The other day I had two new trackback pings on older entries, both spam. This morning I had 135, all spam. Yikes. So, later today I’ll be deleting away, but it will take a while…” – Salguod.net, February 01, 2005

    Updates 2
    Had to make some changes, the spammer decided to ‘teach me a lesson’ by adding healyourchurchwebsite to his referrer. I’ve tightened that up – and in the process, also snarfed some information from him/them – and am now in the process of filing a formal complaint to the Feds. Take note to the sections in yellow where my examples include healyourchurchwebsite…

    The Problem
    Like many of you, I noticed a spike in Trackback Spam pointing to various card-shark subdomains at terashells.com, chat-nett.com and other domains that are sure to change on a daily basis.

    First thing I noticed: the same crap coming in from a variety of anonymous proxies. This mean blocking by IP would quickly become a full-time job. As a stop-gap, I employed a girthy but quick-n-dirty .htaccess solution offered at Aaron Logan’s Loblogomy blog.

    I knew I’d have to find a more efficient approach, I also know that Mark Pilgrim’s ‘How to block spambots …” was causing some other issues on my server because I suspect my server is configured slightly different than his. This happens.

    Still, I didn’t want snoopers like the one I saw from BranDimensions.com, not that I’m hiding anything, but they’re not paying me for my bandwidth even though they profit from it. I needed a solution to solve my short-term trackback spam issue, and take care of my long-term no-pay no play policy regarding the commercial abuse of my bandwidth.

    The Not-So-Final Solution
    With not all that much searching, I found that Parker Morse of Flashes of Panic offered an elegant .htaccess approach that would get me 98% of what I needed. Ina post entitled ‘A little meanness,’ Morse employs a Blocking Referer Spam – mod_rewrite technique developed by Ed Costello back in May of 2004.

    The (obligatory) Warning
    Before we go any further, I need you to understand that while this is an excellent approach, it is not without its dangers. Dangers made clear in an absolutely must read, related post entitled “Killing referrer spam,” Caveat Lector offer this excellent advice:

    BE AWARE: YOU CAN BORK YOUR WEBSITE WITH THIS. I’ve done it. (In fact, I did it two minutes ago. Go me.) How will you know your .htaccess file is borking your site? Well, usually, when you browse to your weblog’s URL you’ll get a “500 Internal Server Error” page of some sort instead of your beloved weblog.

    Always, always, always keep a last-known-good version of your .htaccess file! If you’re using FTP to place your .htaccess file and you bork your site, you just upload the last-known-good file, and you’re golden.

    Or in my case, working from a jailed ssh session I was able to do the following:

    wget http://www.flashesofpanic.com/htaccess.txt -O htaccess_parker.txt
    pico htaccess_parker.txt #see modifications below#
    cp .htaccess htaccess_02feb05.txt
    cp htaccess_parker.txt .htaccess

    The Modifications
    After downloading Parker’s text file version of his .htaccess file, I gave it a quick inspection and modified the following line:

    from:
    SetEnvIfNoCase Referer .*flashesofpanic\.com.* !spam_com

    to:
    SetEnvIfNoCase Referer “.*(healyourchurchwebsite|deanpeters) *” !spam_com

    The script also needed to be modified because I found some problems when trying to enter a post using my crufty old version of MovableType, so I had to add a line to Parker’s otherwise excellent approach. A problem also described in Laurabelle’s Blog article “Die spammers die!“. So after adding a few more drug names to the kill list, I immediately followed with another line of code:

    SetEnvIfNoCase Referer “.*(phentermine|diet-pills|p …
    SetEnvIfNoCase Referer www\.healyourchurchwebsite\.com\/cgi-bin\/mt/mt\.cgi.* !spam_ref

    I suspect this fix was necessary because the way the .htaccess file is set-up, everyone is considered a spammer until we say they’re not. More on how-to modify and the mechanics of how this all works can be found over at Caveat’s column.

    Finally, you may want to block the user agent CandyGenius has identified in this delicious post which asserts:

    The trackback spammer is leaving the same signature as the comment spammer. It’s the same guy. Use the code above to block it all. (psxtreme & freakycheats but that will change tomorrow.)

    Testing
    A quick-n-dirty test of this is to Google your domain using one of the forbidden words. This is because that word will now appear in the referrer header from Google and you should be able to block yourself. For example “healyourchurchwebsite poker.” Not the most fool-proof test, but close enough for government work.

    Now if I could just get rid of those irritating 414 generators trying to hack into an IIS server … which I obviously don’t use … I’m sure there’s an .htaccess solution out there.

    Likewise, let me know if you have improvements or patches … I’d be interested in seeing them.

    Update 11:54 AM
    It is becoming evident that this trackback spamming is less about advertising, and more about denial of service. For about 2 hours this morning, my server was under attack – the information below thwarted all but two trackbacks out of several hundred attempts. In the meantime, I am pondering whether or not I should enforce my terms of service and provide the spammer a bandwidth test using a variation of the following wget command:

    while [ true ]; do wget -r -nd –cookies=off –cache=off –proxy=on –delete-after –user-agent=”all your trackback spam is sucky” “http://online-poker.chat-nett.com”; done

    However, if this is about denial of service, and since the spammer is abusing several anonymous proxies, it could be that the owners of the URLs are also innocent victoms. Your thoughts?

  • Religion is a ‘Chruch’

    We all know know at least one atheist, agnostic or skeptic who boldly (and often blindly) asserts religion is a crutch. Much in part due to the overbearing legalism and spiritual abuse that goes on in a minority of cases.

    That said, I it is my prayer that the Church on the whole prove these individuals wrong, not only with Christian love and charity, but also with correctly spelled <title> tags. Case in point, the ‘North Shore Baptist Chruch‘ of BaySide NY – which is just one of the 4,410 hits Google returned to me when I searched on the phrase “baptist chruch.”
    click here to see larger image of North Shore Baptist Chruch screenshot

    Yes, as a dyslexic, I completely understand how this can happen … yet I implore you … please, please, please, double and triple check your “chruch’s” <title> tags … you’ll be glad you did.

    (update – see related article entitled: Again with the “Religion is a ‘Chruch’”)