Hacker News Reader

Comment by jonknee | Hacker News Reader

Posting 1 comment on 10,000 sites to see which are vulnerable lets you concentrate the bulk of your efforts on the best targets. There's no URL in the post which may mean they are creating a list to hand-spam later on. It's a lot harder for filters to catch hand written text and if a random comment gets through the likelihood that a hand written one will is high.

So maybe out of 10,000 sites they find 1,000 that are good targets and then have their third-world employees go to town working at 10x the rate. Not a bad return.

It's sort of like burglars cruising through a neighborhood on multiple nights to see who has the lights off.

View on HN

I doubt any have real people doing the submissions, it's automated. It would make sense to find which one's are vulnerable, but they wouldn't need to test with a fake spam post, they'd test with a real one and check their backlinks (yahoo site explorer for example).

I disagree. Those are real people who do that kind of work. When I was looking for online work at sites like getafreelancer or rentacoder there usually were tons of job offers regarding forum posts/blog comments. Rarely labeled as forum/blog spam but often meaning that. Here's a typical (current) job offer for forum posts: http://is.gd/c3dIo (This is not intended as advertising but only to provide an impression of such a job offer and as evidence that such job offers actually do exist and are common, depending on where you look.)

In this particular job, they offer $20 for 400 posts (or 2000 replies). Most often, one condition of posting such stuff is that it is at least unique, "original work" or would "pass copyscape".

So, there seem to be people who actually do this kind of job manually.

Exactly, real people are hired to generate backlinks via blog comments. I consider it spam, but since the goal is to make a relevant comment, that's debatable. The example given in this post however, is automated. You don't hire people to write unique content and have them list keywords. That's the type of spam I'm referring to as automated.

Reply on news.ycombinator.com