Elie Bursztein, Baptiste Gourdin, John Mitchell Stanford University & LSV-ENS Cachan
Total Page:16
File Type:pdf, Size:1020Kb
Talkback: Reclaiming the Blogsphere Elie Bursztein, Baptiste Gourdin, John Mitchell Stanford University & LSV-ENS Cachan 1 What is a blog ? • A Blog ("Web log") is a site, usually maintained by an individual with • Regular entries • Commentary • LinkBack • Entries displayed in reverse-chronological order. http://elie.im/blog Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Key Statistics • 184 Millions blogs • 73% of users read blogs • 50% post comments universalmccann Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Anatomy of a blog post Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Why blogs are special ? User Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Why blogs are special ? User Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 What is a TrackBack ? Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Trackback Illustrated Little Timmy said to me... "What's Trackback, Daddy?" "Wow! Jimmy Lightning has written the best 1. post ever! It's so funny! And it's true! That's "Best Post Ever" why it's so good. I need to tell the world!" "Check it out world! I've "Jimmy written all about Jimmy 2. Lightning is Lightning's post on my Elie Bursztein, Baptiste Gourdin, John Mitchell swell"TalkBack: reclaiming the blogosphere from spammerweblog. My weblog's http://ly.tl/p21 called 'The Unbloggable Blogness of Blogging'. It's a good name huh? Wow, I sure hope Jimmy sees what I said about him..." "Hey! I wonder what happens when I click 3. on that Trackback link at the bottom of "Best Post Ever" Jimmy's post?" "Far out! In that funny pop-up is a link back to Trackback: my site! Too cool for "Jimmy Lightning school!" is swell" Little Timmy said to me... "What's Trackback, Daddy?" "Wow! Jimmy Lightning has written the best 1. post ever! It's so funny! And it's true! That's "Best Post Ever" why it's so good. I need to tell the world!" Trackback Illustrated Little Timmy said to me... "What's Trackback, Daddy?" "Wow! Jimmy Lightning "Check it out world! I've has written"Jimmy the best written all about Jimmy 2.1. postLightning ever! It's is so funny! Lightning's post on my "Best Post Ever" And it'sswell" true! That's weblog. My weblog's why it's so good. I called 'The need to tell the world!" Unbloggable Blogness of Blogging'. It's a good name huh? Wow, I sure hope Jimmy sees what I said about him..." "Hey! I wonder what "Check it out world! I've happens"Jimmy when I click written all about Jimmy 3.2. on thatLightning Trackback is link Lightning's post on my "Best Post Ever" Elie Bursztein, Baptiste Gourdin, John Mitchell at the swell"bottomTalkBack: reclaiming of the blogosphere from spammerweblog. My weblog's http://ly.tl/p21 Jimmy's post?" called 'The Unbloggable Blogness "Far out! In that funny of Blogging'. It's a good pop-up is a link back to Trackback:name huh? Wow, I my site! Too cool for "Jimmysure hopeLightning Jimmy sees school!" iswhat swell" I said about him..." "Hey! I wonder what happens when I click 3. on that Trackback link at the bottom of "Best Post Ever" Jimmy's post?" "Far out! In that funny pop-up is a link back to Trackback: my site! Too cool for "Jimmy Lightning school!" is swell" Little Timmy said to me... "What's Trackback, Daddy?" "Wow! Jimmy Lightning has written the best 1. post ever! It's so funny! And it's true! That's "Best Post Ever" why it's so good. I need to tell the world!" Little Timmy said to me... "What's Trackback, Daddy?" "Wow! Jimmy Lightning "Check it out world! I've has written"Jimmy the best written all about Jimmy 2.1. postLightning ever! It's is so funny! Lightning's post on my "Best Post Ever" And it'sswell" true! That's weblog. My weblog's why it's so good. I called 'The need to tell the world!" Unbloggable Blogness of Blogging'. It's a good name huh? Wow, I Trackback Illustratedsure hope Jimmy sees what I said about him..." Little Timmy said to me... "What's Trackback, Daddy?" "Wow!"Hey! I Jimmywonder Lightning what "Check it out world! I've hashappens written"Jimmy when the bestI click written all about Jimmy 3.2.1. poston thatLightning ever! Trackback It's is so funny! link Lightning's post on my "Best"Best PostPost Ever"Ever" Andat the it's bottomswell" true! That's of weblog. My weblog's whyJimmy's it's so post?" good. I called 'The need to tell the world!" Unbloggable Blogness "Far out! In that funny of Blogging'. It's a good pop-up is a link back to Trackback:name huh? Wow, I my site! Too cool for "Jimmysure Lightninghope Jimmy sees school!" is swell"what I said about him..." "Hey! I wonder what "Check it out world! I've happens"Jimmy when I click written all about Jimmy 3.2. on thatLightning Trackback is link Lightning's post on my "Best Post Ever" Elie Bursztein, Baptiste Gourdin, John Mitchell at the swell"bottomTalkBack: reclaiming of the blogosphere from spammerweblog. My weblog's http://ly.tl/p21 Jimmy's post?" called 'The Unbloggable Blogness "Far out! In that funny of Blogging'. It's a good pop-up is a link back to Trackback:name huh? Wow, I my site! Too cool for "Jimmysure hopeLightning Jimmy sees school!" iswhat swell" I said about him..." "Hey! I wonder what happens when I click 3. on that Trackback link at the bottom of "Best Post Ever" Jimmy's post?" "Far out! In that funny pop-up is a link back to Trackback: my site! Too cool for "Jimmy Lightning school!" is swell" Why the LinkBack problem is different ? Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Why the LinkBack problem is different ? • A single spam can reach thousand of users Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Why the LinkBack problem is different ? • A single spam can reach thousand of users • LinkBack notification are automated Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Toward a secure world ? 30 million LinkBack spam by day Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 100000 Spam Campaign example 75000 50000 Number of Spams 25000 Elie Bursztein, Baptiste Gourdin, John Mitchell 0 Trackback Spams Mar 1, 2007 Mar 14, 2007 Mar 27, 2007 Apr 9, 2007 Apr 22, 2007 May 5, 2007 May 18, 2007 May 31, 2007 Jun 13, 2007 Jun 26, 2007 Jul 9, 2007 TalkBack: reclaiming theJul blogosphere 22, from2007 spammer Aug 4, 2007 Aug 17, 2007 Aug 30, 2007 Sep 12, 2007 Sep 25, 2007 Oct 8, 2007 Oct 21, 2007 Nov 3, 2007 Nov 16, 2007 Nov 29, 2007 Dec 12, 2007 Dec 25, 2007 Jan 7, 2008 Jan 20, 2008 Feb 2, 2008 Feb 15, 2008 Feb 28, 2008 Mar 12, 2008 Mar 25, 2008 Apr 7, 2008 Apr 20, 2008 http://ly.tl/p21 Spam Campaign example Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 The end of all hope ? Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 The end of all hope ? Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 The end of all hope ? Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Adversary Model • Resourceful • Efficient • Knowledgable • Adaptive Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Threat • Blog spoofing • Cried Wolf attack • Linkback tampering and replay • Spam in breath or in deapth Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 Current Linkback specifications RefBack PingBack TrackBack TalkBack Visit from Code executed Code executed Code executed Trigger Mechanism the sender site at posting time at posting time at posting time Notification medium HTTP referer XML-RPC call HTTP POST HTTP POST - S post URL - S site name - S post URL - S post title - S post URL - S site name - S post excerpt Information sent none - R post URL - S post title -SeedToken - S post excerpt - S Public key - R Public key -Signature Auto-discovery Specially formatted none LINK Tag LINK Tag mechanism information in the body S Authenticity - - - R Authenticity - - - Integrity - - - Confidentiality - - - Table 1: Linkback mechanisms comparaison Elie Bursztein, Baptiste Gourdin, John Mitchell TalkBack: reclaiming the blogosphere from spammer http://ly.tl/p21 2. The sender (S) crawls the receiver (R) blog as usual, discovers the notification URL (Sec 6) and in addition 5. Receiver Receiver validation Authority fetches the receiver (R) public key used to authenticate the receiver in the Linkback and to encrypt data (Sec Sender 7). Authority 3. The sender (S) uses the seed fetched at step 1 along 1. Seed 4. Talkback with the notification URL and public key fetched at request reporting step 2 to build and send the secure LinkBack to the receiver (R).