How We’ve Addressed The Recent Data Compromise

AWeber was recently the victim of an intentional attack to mine email addresses.

We’d like to take this opportunity to share what happened, what was (and was not) affected and what we’re doing as a result of this attack.

What Happened?

We use a variety of pieces of software to run different parts of our service and provide support to customers. Some of these are tools we have developed ourselves; others are third-party ones that we license from other companies.

By exploiting and combining vulnerabilities in two separate third-party software systems, the perpetrators managed to gain access to a part of our system where subscriber email addresses are stored.

We have received reports of some of those email addresses receiving spam messages. While the volume of these reports is low, we are treating this incident with the utmost seriousness and addressing it fully.

This is not nice for the owners of mailing lists, buidling a good mailing list is hard work and takes a lot of time (and money).
I hop that other provider like mailchimp raised the security to prevent there customers for this kind of data thieves.

Google Groups, Killed by Spam?

John Resig lists reasons why Google Groups is losing the battle against spam. Google Groups is dead, John argues saying the primary problem with the service “boils down to a systemic failure to contain and manage spam. Only a bottom-up overhaul of the Google Groups system would be able to fix the problems that every Google Group faces.” Here’s one problem John lists, and I recently experienced this myself (posting the same message multiple times after it failed to show up):

It's very sad, because of all the spam (even send by group owners) Google groups is often recognized as spam in google mail. If we talk about groups moderated by google, there is a lot of posted spam and the same for blog comments.

I'm just wondering why Google has not a better solution for this (google know so much about us). Maybe Google should use akismet or other IP / email blacklists?

What is Google doing to combat the effects of comment spam?

The "nofollow" attribute works very well, but spammer post there comment even if this attribute is set. It looks like a spammer think that people some of the visitors will follow the link. The bad thing on some google blogs is that they have have problems too. This is pretty annoying if your subscribed to the blog comments. Avery effective solution is to block countries where most spammer come from...