http://www.bradsbits.com/2007/.....fferences/

1. MyBlogLog is actually integrated with Flickr already, you can’t call that hate. It seemed to be a fairly secure process, and you had to authorise Flickr to give MyBlogLog access

2. There was background communication by email, and Shoemoney had been asked to give a heads up before posting anything more.

3. Even services like Adsense aren’t totally secure

4. There is a terms of service posted now, linking through to the Yahoo ToS that covers all their sites, and even new services by default

5. Advert tracking service is part of the free features, though if you have the free service on a high traffic blog you are hardly going to notice the clicks in the few positions displayed unless you have an insane CTR on the ads or no outbound links.

6. It is still just the original 5 guys, not Yahoo, and they are tied up in personal moves across the country, setting up new servers, and a reactionary development process forced on them by hackers and spammers. Reactionary development is very inefficient.

A 403 error page is what any sensible web company would show a hacker, and Wordpress blogs do it all the time with plugins like Bad Behavior.

With no terms of service or comments policy, how can you delete legitimate trackback, or even spam on a blog. Most bloggers are guilty of not crossing legal Ts

next time get the title right ! it should have been .

…bans blogger

AND NOT

…bans Blogger

im sure the intended meaning was a person who blogs .but it could have meant the company owned by Google which means something different all together.

I would expected TechCrunch of all people to understand these subtle differences .

Cheers .
a well wisher.

This is not a serious exploit — This is a case of careless coding and should have been picked up in testing somewhere along the line .. Funny what you miss sometimes.

Shoemoney simply pointed a very simple exploit of the system. I’m really surprised that it didn’t surface sooner. There was no malice in posting this because it’s a really easy fix… Often hacker-types forward exploits to you because not all hackers are bad — Hackers look at things that most normal people don’t and can be a great resource if you show respect to them.

I like MyBlogLog and as a startup, I can appreciate how difficult it is — As least there was an apology offered.. Live and learn..

This was a non-funded project. I designed, developed the entire thing over the course 3.5 weeks (nights and sundays only). (and yes, we’ll have a widget soon but it won’t be hackable)

ShoeMoney’s back and is now MyBlogLog’s featured member:
http://mybloglogb.typepad.com/.....hurts.html

We have a TOS, et al.
http://mybloglogb.typepad.com/.....knock.html

And, to be clear, it’s our users that have access to how many clicks occur on their Adsense ad units — the aggregate data is almost useless in this particular case as we don’t know what individual ads get clicked on, just that a click happened in the entire ad unit.

I’m concerned that they don’t have a TOS that can be used to justify banning someone and a clearly stated policy of how they will and won’t use information collected about users’ traffic stats. Surely, this is where the big bucks lawyers at Yahoo can provide value. Quickly.

There have been a number of recent posts ’round the blogosphere about our ads tracking and we’d like to make a few clarifications: 1) Tracking outbound links is what caused us to launch MyBlogLog in the first place. Ads are…

Companies: Don’t implement bureaucratic bigco policies.

People: Don’t try and “game” websites.

I’m with Lawrence on this again with his second comment — Eric/Scott, I’d reinstate Shoemoney before this blows way out of proportion; immediately. He has some serious clout — and I’m sure his blog alone has brought you many new users. You don’t have a ToS, you banned him (and haven’t banned the other user that exploited it a month prior — it was in French and the guy doesn’t have the readerbase that Shoemoney has) — and yes, I do think Jeremy could have emailed you guys prior to exposing these flaws … but his blog is also about his skills, so it is somewhat expected that he took the route he took. I’d get him on the payroll for consulting, so he doesn’t expose any further bugs — and rather reports them to you. I’d also look at his recommendations he posted — I believe he truly has good intentions and as I am, is fascinated/intrigued by the service. The only reason he’d work to hack/exploit you (and then publicly post that stuff) is because he believes in you. He’s not going to waste his time on stuff that doesn’t matter. Lastly, where’s Yahoo’s support of throwing their QA team on MyBlogLog to rip the application apart (and fix these security holes)?

There isn’t any *real* technology behind MBL.

I’ve led enough site developments to know that it is not more than 2 weeks of two programmers working 10hr days. And you can’t possibly have a harder and more boring interface as MBL has, so I’ll throw in a better interface too in those 2 weeks.

They’ve had enough time to clean up their acts IMO. Before announcing the Yahoo buy they should have taken couple weeks and fixed things up. At this point it seems like their problems may be so low down that a top-bottom re-coding may be well called for.

Not to mention:
http://www.shoemoney.com/2007/.....ad-clicks/

-Zaid