Social Icons

Pages

Showing posts with label Blog Ownership. Show all posts
Showing posts with label Blog Ownership. Show all posts

Saturday, 14 December 2013

Account / Blog Recovery, With Team Blogs, Requires Well Managed Membership

We've known for a while, about account recovery for team blogs.
We've sent login instructions for the blog at http://mybloggerblog.blogspot.com/ to you and the other blog authors.

Apparently, team ownership recovery has its limits.
I used "Forgot?", and got the advice
Your blog has too many authors to email them all. Please enter your email address into the form below to look up your account information.
The blog has too many contributors. Since some of these contributors' accounts are no longer active, there's no way for me to easily identify the account which has now has the administrator rights.

Like account recovery for a blog with inactive team members, the "Forgot?" wizard won't work well with large membership lists, which are not well maintained.

In this case, the would be owner (former owner?) now has two possibilities.
  1. If he was the only administrator, the blog now has no administrators - and any author can now claim ownership of the blog, by using “Forgot?” and providing the proper email address.
  2. If the blog still has administrators, the former owner now has to identify an administrator who is active and accessible, and who is willing to restore his account to administrator status.


What to do, now?

Once again, we see the advantage of keeping the membership list well maintained.

>> Top

Wednesday, 9 October 2013

Export / Import Requires Administrative Control Of Both Blogs

Occasionally, in Blogger Help Forum: How Do I?, we see the naive query
How do I merge my two blogs, using Export / Import?
When given the simple advice
Use the "Export blog" and "Import blog" wizards, both in the dashboard Settings - Other menu.
the immediate response is
I don't have that menu item!
This person has, most likely, lost control of the Blogger account.

In order to avoid encouraging scraping of blog contents, both the Export and Import wizards are only available to blog administrators. Not everybody wishing to use "Export blog" has blog ownership, however.

Too many people, denied immediate recovery of control of their blog, just start another blog.

With a new blog, the first thing needed is the content from the old blog. This is not easily had, however - because both "Export blog" and "Import blog" are part of the Blogger dashboard - and can be accessed only by blog owners.

If anybody could use "Export blog", and export the comments and posts from any blog, "Export blog" would be a very popular wizard - to blog thieves. To encourage Export / Import to be used for legitimate purposes, Blogger made it part of the Blogger dashboard - where it is accessible only to blog administrators.

This does not provide a solution for people who have lost control of their Blogger accounts - and who naively figure to start a new blog, and move the contents of the old blog to the new blog. If you're in this situation, you have only two possibilities.
  1. Recover comments and posts using blog feeds and online cache.
  2. Cluster the new and old blogs - but asymmetrically.
You can link from the new blog back to the old blog, using any combination of imaginative techniques - but without control of the old Blogger account, you're simply not going to be able to link from the old blog to the new blog.

Sorry. Once again, you have to always retain control of your Blogger account.

>> Top

Sunday, 22 September 2013

Account / Blog Recovery May Involve Your Friends Email Archives

Recovering ownership of a Blogger account or blog may be a frustrating process.

Recovering control of a long forgotten account or blog starts with having a token sent to the recovery email address. If you don't have access to the recovery email account, you may be able to use the Google Account recovery wizard - if you can at least provide the email address that you used long ago, and a few personal details.

But what if you don't even remember the email address? Blogger won't just tell you what the address was.

In the latter case, you may have to involve your friends - and some detective work.

Now, you hope that when you registered your Blogger account long ago, you provided an email address that you used for real life activity.

When you need to identify the email address used, long ago, for registering your Blogger account, think back. Who did you email, long ago, around that time, for serious discussions?

If you're lucky, one of your friends, carefully searching her / his email archives, can find your email - and provide the email address that you were using.

With help from your friend, and now knowing the email address, that may even help you remember the password that you may have used. If you're lucky, you may be able to use that email address and password, and instantly recover control of the blog. Just don't spend a lot of time guessing, and cause account lock (aka "suspicious activity").

Having recovered the email address, try the Google Account recovery wizard, again. This is your best bet. Without this, you're probably going to need to establish your identity using a court order, issued by a sitting judge.

>> Top

Friday, 2 August 2013

Recovering Stolen Blogs Is Not An Open And Shut Case

Recently, we've seen a few problems reports, in Blogger Help Forum: Something Is Broken, requesting return of blogs stolen from the rightful owner.

Supposedly, the "rightful" owner is the person posting the problem report. We've learned from past experiences that this may not always be the case, however.

Long ago, when a stolen blog claim was posted in the forum, we could report it to Blogger Support as a "blog theft".

In many cases, given enough patience, Blogger Engineering and Google Legal would carefully examine the blog ownership history, and eventually restore the blog to its "rightful" owner. Unfortunately, even with the most careful forensic examination, the "blog theft" claim was occasionally used by hackers, to steal other peoples blogs.

Most recently, when "blog theft" is reported, Blogger Support declines to consider the case. Considering all of the issues, we generally see that they are making a responsible business decision.

Instead of spending massive amounts of time verifying individual claims, Blogger Engineering appears to be working on overall improvements to Blogger - to encourage blog owners to not put themselves, or their accounts and blogs, in unrecoverable positions.

Any blog which contains abusive material - whether malware, porn, or spam, or illegally obtained material - can be reported using the proper complaint form. Blogs which do not contain abusive material are the property of the current owner - and Blogger / Google will respect and support the current owner.

Blog owners, claiming theft, can generally report a stolen blog as abusive - if the current content justifies that claim. Other than that, the best solution is to hire a lawyer and convince a judge to issue a court order - and require Google Legal to become involved.

The issue of Blogger account and blog recovery is a long and painful one - for many people.

>> Top

Tuesday, 23 July 2013

Anonymous Blog Ownership, And Hacked Account Detection

This week, we're seeing a number of reports from blog owners with Blogger accounts recently hacked.
I was asked to change my password, because of suspicious activity. Having done that, my blogs are now deleted!

With hacked Blogger / Google accounts, causing deleted blogs, there's not a lot of advice that we can provide.
As you just discovered, the account is recovered almost immediately. Blog recovery, unfortunately, takes longer - sometimes, 1 to 2 days. You'll have to wait, patiently, until your blogs are verified by Google Security staff.

We're also seeing the normal amount of reports of blogs deleted by Blogger, when detected for malware, porn, or spam. In some cases, blog review ends with the conclusion that the blog was not, in fact, deleted for a TOS violation. In these cases, the blog won't be restored by Blogger Support.

In some cases, blog review - which starts with a claim of spurious classification for malware, porn, or spam hosting - ends with advice to have the owning Blogger / Google account recovered.

The blog owner has to wait until the review process is complete, to learn where he should have started, days ago. As I've observed a few times in the past, anonymity - whether intention or accidental - can cause problems with blog ownership. If your Blogger / Google account is locked, but you don't get the required notification, you can waste valuable time with the blog offline.

Whether you intentionally anonymise yourself - or accidentally create a second (or third) Blogger account, you may not get essential email from Google, advising you to recover your account. When that happens, your blog will stay offline until it can be reviewed - and review starts only after you recover the account that was locked.

Now, you're going to have to open every possible email account, and carefully look for the overlooked email. If you never find the missing email message, you're going to have to login to Blogger, using every possible email address that you may have ever used, until you hit the locked Blogger account.

When you do identify the locked account, you'll get the advice to change your password, solve a CAPTCHA, and / or answer a number of secret questions, to prove that you are the account owner. Or, if you're lucky, you can await a phone call (digital or voice) with a special code, to unlock your account. Either way, you'll be unlocking the account while under stress, with the blog offline.

And after you get the account unlocked, you'll still have to wait until the blog(s) can be verified.

If you try to blame Google, for this disaster
Why was my blog deleted? I did not spam!
you will simply be wasting your time. This is yet one more story that starts with gratuitous and uncontrolled creation of multiple Blogger accounts and email addresses.

>> Top

Thursday, 23 May 2013

Abuse Reporting Is Not For Deleting A Blog For Which You Lost Control

Sometimes, people lose control of their blog, with no ability to regain control - and simply want the blog deleted.
How do I have Blogger delete the blog, for me, since I can't prove ownership?

When advised that Blogger does not delete blogs on behalf of former owners, the next thought by the former owner is to have the blog deleted as abuse.
What category of Abuse should I use, to have a previously owned blog, deleted?

While not genuinely fraudulent, the latter approach is misuse of the Abuse reporting process.

The Abuse Reporting process is properly used to report blogs owned by another party, for TOS Violations.

Blogger currently provides the Blogger Help: Report abuse form, which has specific categories of abuse.
  • Legal issues
  • Hate speech, violent or crude content
  • Harassment
  • Spam, phishing, or malware
  • Nudity
  • Posting of private information
  • Impersonation
All of those categories refer to content published by another person. Nothing there is for reporting a blog previously owned, with control lost by negligence.

Whatever the loss of control, it's yours to correct.
  • Corporate blog, control lost.
  • Personal blog, control lost.
  • Team blog, control stolen.
None of these scenarios warrant abuse / TOS violation reports.

Note a very specific warning, about misuse of the DMCA Violation complaint.
Please note that you will be liable for damages (including costs and attorneys' fees) if you materially misrepresent that a product or activity is infringing your copyrights. Indeed, in a recent case (please see http://www.onlinepolicy.org/action/legpolicy/opg_v_diebold/ for more information), a company that sent an infringement notification seeking removal of online materials that were protected by the fair use doctrine was ordered to pay such costs and attorneys fees. The company agreed to pay over $100,000. Accordingly, if you are not sure whether material available online infringes your copyright, we suggest that you first contact an attorney.

If your company publishes a blog, you are responsible for retaining control of the blog, as with any corporate asset. If you lose control of a corporate asset, you don't contact the vendor, and demand that they delete the asset that you lost. Your problem is with the current owner - whether it's a civil or criminal issue, it's not the responsibility of the vendor to correct an ownership problem.

If the blog was personally yours, and you forgot the account name and / or password, it's your responsibility to regain control.

If the blog was under team ownership, and another team member stole the blog, your problem is with the former team member. If the team member was (righteously or spuriously) classified as a non repentant spammer, you may have to get the blog reviewed, to regain control.

If you believe that you can prove your right to control (or delete) the blog, you may hire a lawyer, and have a judge certify your identity. None of these cases can be resolved, using abuse / TOS violation reporting.

>> Top

Thursday, 18 April 2013

URL Availability Competition, During "Buy a Domain", Is Similar To "Create a Blog"

Some Blogger blog owners, trying to setup a new blog, discover the hard way that other people are trying to do the same thing.
When I try to use "Create a blog", I keep seeing
This name is not available.
or
Blogger is saying it's available - but as I begin to register, it says that it has already received a request for this name.


Other blog owners discover that the competition between Blogger blog owners, when using "Create a blog", also applies to "Buy a domain". And worse yet, "Buy a domain" involves competition with would be website owners outside Blogger / Google.

Besides the competition with other buyers, there's a problem that the domain purchase process takes time - and during the purchase process, someone else can be purchasing the same domain also.

The longer the purchase process takes you, the greater the possibility that someone else may "steal" the domain from you. You, and the unseen other person, may start the purchase at the same time - but the person who gets the money to their registrar first gets the domain.

Let's use "Create a blog" as a simple example of an address selection process.
  1. You type the blog name, of your choice.
  2. With every character you type, Blogger checks for availability.
  3. Initially, with not enough characters typed, you see bad news.
    Sorry, this blog address is not available.
  4. When you have typed enough characters so you are now requesting a unique name, you see good news.
    This blog address is available.
  5. Since you have, hopefully, already entered a Title and selected a Template, you now hit the "Create blog!" button.
  6. Hoping that you were fast enough, the address which was available half a second previously is available as you hit the button - and the blog name of your preference becomes your new blog name.
  7. If you were not fast enough, someone else might have snuck in front of you. Instead of seeing your new blog, you now see the bad news.
    Sorry, this blog address is not available.

The "Create a blog" wizard is simple.
  1. You see good news.
  2. You hit "Create blog!".
  3. You are done.

Even with a "Create a blog" selection period of 1 second - and if your reflexes are not that good, it could take you longer - you could lose out. What if the selection process was longer - instead of 1 second, say 5 minutes? The "Buy a domain" process is a bit more complicated, than "Create a blog".
  1. You enter an available domain URL.
  2. You hopefully see the good news.
  3. Now, you pay for the purchase.
  4. You enter all of the details, about your bank account.
  5. Google charges your bank a token amount, to verify that you actually entered a valid bank account number.
  6. You hopefully see more good news.
  7. Now, Google passes the purchase to the registrar.
  8. The registrar sends the actual purchase to your bank.
  9. Your bank credits the account of the registrar.
  10. The registrar then registers the domain, in your name.
  11. Google can then setup the addresses in the domain.
  12. Blogger can then publish the blog, to the domain.
  13. And hopefully, the blog is now live (and In Transition) with the domain URL.

The "Buy a domain" wizard is not simple.
  1. You enter an available domain URL.
  2. ...
  3. The registrar registers the domain, in your behalf.
  4. You are done.
Unfortunately, during the amount of time that it takes your bank to pay your registrar, somebody else could be buying the same domain, from another registrar. The longer that it takes your registrar to get paid, the greater the chance that someone else may register the domain, which you have supposedly paid for, before your purchase is complete.

Unfair? Certainly. But, based on the worldwide Internet based domain registry system, it can happen. What's worse, the symptoms of an unsuccessful domain purchase are similar to an attempted purchase restart.

And that leaves you with the uncertainty, when you post in Blogger Help Forum: Something Is Broken.
Blogger is saying it's available - but as I begin to register, it says that it has already received a request for this name.
And sometimes, after you wait the legendary 2 to 3 days, you find that someone else bought the domain, while you were waiting.

>> Top

Sunday, 10 March 2013

Blog Owners, Unable To Request Restore Of A Deleted Blog

One of the more intriguing issues, seen in Blogger Help Forum: Something Is Broken, involves people unable to recover control of their blogs.
I recently changed ISPs, and now I can't login to update my blog.

Occasionally, this issue becomes more complicated, because the blog is deleted - and the owner can't request that it be restored, using the automated review request wizard. Sometimes, the would be blog owner may to try to bypass the current blog recovery policy, by claiming special circumstances.
The blog has been deleted. I received no suspicious activity or password change notification emails, or emails of any kind related to my blog.

What is the story here? Can blogs just disappear from the Blogosphere, without the involvement of the blog owners - and be unrecoverable?

Recovery of a deleted blog starts with the requirement that only a blog owner can un delete a deleted blog - and this is where many mysterious disappearances start.

Since a Blogger blog is the property of the owner, and the owner is allowed to delete a blog any time required, it would not be right to let people who are not the owner un delete a blog - or demand that the blog be un deleted. To enforce this requirement, Blogger added the dashboard based Restore wizard.

Since only the owner will have the deleted blog listed in their dashboard "Deleted Blogs" list, only the owner can request restore of the blog in question.

The dashboard Restore wizard serves blog owners, with blogs deleted under various circumstances.
  • Deleted by the owner.
  • Deleted by Blogger, as a suspected spam host.
  • Deleted by Google, for TOS Violation.
Any deleted blog will appear in a special dashboard list, "Deleted Blogs" or "Locked Blogs" - when it can be recovered. If the blog is not recoverable by the owner, there may not be a link.

There are specific cases where a deleted blog may not be recoverable using the recovery wizard.
  • The blog is locked, pending integrity check (following account lock for suspicious activity).
  • The blog is owned under a different Blogger account, and is listed on another dashboard, under "Deleted blogs".
  • A blog owner deleted the blog, long ago - and the blog is no longer recoverable.

A blog locked, pending integrity check, cannot be requested for restore. The owner has to first have the owning account unlocked. Similar to the account recovery process, Blogger / Google will require that the owner provide proof of ownership, before the account will be unlocked. With the account unlocked, security specialists will inspect each blog owned by the account, and verify that each does not contain evidence of tampering by a temporarily successful hacker.

While a blog is under integrity check, it won't be listed on the dashboard of the owner - either under "Deleted blogs", "Locked blogs", or "My blogs". Neither the owner, nor any third parties, will be able to do anything except wait, patiently.

Blogs found to contain malware can be locked as TOS Violations, with the owner later required to remove the malware found. This requirement will apply for malware installed by the owner (intentionally, or unintentionally), or for malware installed by a hacker.

With a blog locked pending malware removal, the owner is given the benefit of the doubt, and allowed to simply remove the malware, no questions asked. In some cases, Blogger may be able to assist by providing specific identification of the malware found - but this won't happen, consistently.

A blog owned under another account must be un deleted by the owner of the other account. Again, only a blog owner can have a blog restored - whether deleted by an owner, or by Blogger / Google.

A blog deleted over 90 days previously cannot be recovered. It won't appear on the dashboard of any (former) owner, since it can't be recovered.
It's dead, Jim.

The basic rule is simple. If your blog was deleted, and if you're able to un delete it (or request un deletion), you'll have a link on your dashboard. If a blog is not listed on your dashboard, you can't request, with any predictable success, that it be un deleted - any more than you can demand that a non deleted blog be restored to your control.

>> Top

Wednesday, 30 January 2013

If You Cannot Prove Ownership Of Your Blogger Account, Your Next Step May Involve Court Action

We've explored the issues of Blogger account and blog recovery policy, repeatedly. We've mentioned the business concerns, the personal support issues, and even the strategic hacking possibilities. Even so, we continue to see evidence of blog owners who just don't understand the message, posting in Blogger Help Forum: Something Is Broken.
I started a blog under an alias, to be able to post anonymously, and can't remember the login details or the e-mail recovery. How can I regain access to my blog?

Last year, Blogger Support offered the "final" word about account recovery assistance, in the forum.
Due to the sensitive nature of these issues, we won't be able to troubleshoot your issue in this public forum.
Even giving that advice, some blog owners still insist that Google is not cooperating, in refusing to restore access to Blogger accounts and blogs, to people who cannot prove their right to ownership.

The policy on ownership recovery is quite simple. Anybody requiring recovery has to prove their right to a given Blogger account or blog, using the tools provided.
Because Google doesn't ask for much personal information when you sign up for an account, we don't have many ways to verify that you own an account.

Blogger / Google provide two automated recovery tools - and that is the limit of their cooperation. Every Blogger blog owner, who actively publishes a blog, and who wants to keep their blog under their control, needs to appreciate this limit - this is how Blogger and Google prevents devious hijacking of our blogs.

For those blog owners who truly need - and deserve - control of their lost blogs, there is one final recourse. Any owner, who cannot use the Blogger / Google automated tools, are entitled to take their concerns outside Google, and have their identity certified by the courts. Start by hiring a lawyer, take the matter to a judge, and get a properly issued court order. Then, serve the court order, properly, to Google.

Let's let the courts assume responsibility of deciding who is a worthy blog owner - and who is potentially a hacker.

>> Top

Thursday, 20 December 2012

Use Of Google+ For Networking, And Keeping Your Blogger Account And Blogs Safe

One constant activity in Blogger Help Forum: Something Is Broken involves blog owners whose blogs were deleted - either righteously or spuriously - as part of the ongoing battle against spam, in Blogger blogs. Generally, the problem comes directly from the blog content.

Sometimes, the problem is more subtle.
When I tried to login to Blogger, I got a screen that said my account needed to be verified, due to "unusual activity on my account". Having verified my account, I see that my blogs have been deleted.
This is part of one of the more intriguing episodes, in the never ending fight against hacking and spam, in Blogger.

Some Blogger blog owners participate in comment based discussions, and provide their email addresses there. Some state their email addresses openly, in the body of the comments, for the world to see when viewing the comments. Others post comments using their Blogger accounts, knowing that the blog owners can see their email address in the comment moderation / notification email messages - and can contact them using email.

Spammers use comment based networking, to their advantage. They subscribe to any comment thread, using the "Notify me" option - then wait while blog readers comment using their Blogger accounts. As the email comes in, from blog readers commenting, they scrape the email addresses from the email content. Since most people commenting either openly state their blog URLs in the comment bodies - or link to a list of their blogs - the spammer now has two essential ingredients, to be used for hacking someone's Blogger account, and gaining control of the blogs owned by the account.

Google now provides Google+, where we can network with a designated audience, and avoid spam in our email. Using Google+, our email addresses are not revealed, and spammers have less incentive to use Google+ for email address harvesting. This protects our Blogger accounts and blogs against hacking, and relieves us from email based spam.

For people who update their Blogger accounts to use Google+ based profiles, but continue to network using Blogger comments, Blogger now protects us by using anonymous email addresses in all comment generated email. This leaves people who continue to comment, using Blogger accounts with native Blogger profiles, vulnerable to ongoing email address harvesting, and account hacking.

Blogger account hacking, using email addresses harvested from Blogger blog comments, will typically involve brute force password guessing. Blogger, detecting brute force attempts against a vulnerable Blogger account, will lock the account and the blogs. Once we verify ownership of our Blogger account - and hopefully change the Blogger account password to something less vulnerable to guessing - the blogs owned by a possibly compromised account remain locked, until they can be examined for signs of tampering, by Google security / spam analysts.

We also must consider the possibility that not all brute force password guessing attacks are being detected by Google - and some Blogger accounts are being deviously, and temporarily, hijacked.

People who setup Blogger accounts based on bogus email addresses - or who have accounts based on old email addresses which they can't use - continue to present a challenge here. These people will never receive essential email advising them of a problem in either verifying their Blogger account - or their blogs. This will continue to make our initial spam lock advice relevant.
Can you login to Blogger? Do you have a dashboard link "Deleted blogs"? That's where you start.

You wait 24 to 48 hours after submitting a Restore request - then you post back here, and we take the next step.

>> Top

Wednesday, 19 December 2012

Submitting A Court Order To Google

Periodically, we have discussions in Blogger Help Forum: Something Is Broken, about issues, that absolutely cannot be resolved in a forum problem discussion.

These issues will vary, by relationship to a given blog, as well as by nature of the offense perceived.Some of these complaints may have been reported to Google, in an ongoing effort, for years.

We know that Google Legal has to take a conservative approach in evaluating the various complaints submitted to them, using the Google Content Removal process. Every complaint may involve a third party, who has equal rights that must be considered.

In cases where Google Legal must deny action, and generally will not respond to a submitted Content Removal form, the person making a complaint is advised to use the courts to verify his identity and / or legal relationship with the blog in question.

Anybody who does not receive appropriate response from Google Legal may hire a lawyer, start a lawsuit, and get a court order issued by a judge. A properly issued court order can be then submitted to Google using the Google Help: Submit a Court Order to Google form.

>> Top

Thursday, 8 November 2012

You Cannot Have The BlogSpot URL With Your Business Name, If That URL Is In Use

We see the naive queries by small business owners, in Blogger Help Forum: How Do I?, about setting up a blog with their business name, too frequently.
The BlogSpot URL for my business is in use. Can Blogger have it re issued to me?
and
I own "xxxxxxx.com", can Blogger give me "xxxxxxx.blogspot.com" so I can publish my Blogger blog to match?
These are all people who do not understand the reality of the Blogger policy
First come, first served.


If somebody already owns the Blogger blog with your desired URL, it's their blog - and it's their blog until they tire of owning it.

The Blogger "Create a blog" wizard assigns BlogSpot URLs based on availability - and it identifies unused URLs in real time. How quickly could the wizard work, if it was required to search every country business directory worldwide, before assigning an unused URL to a person trying to setup a new blog?

What would happen if a business owner from England demanded a required BlogSpot URL, which was in use by a business owner in the USA? Should Google setup a URL assignment court, for deciding upon the merit of anybody demanding a given BlogSpot URL?

If you seriously believe that the identity or reputation of your business is threatened by the existence of a Blogger blog which you don't control, and you can convince a judge of that fact, then you (or your lawyer) can serve a properly issued court order to Google. That's not going to get you the BlogSpot URL of your dreams, unfortunately.

What a court order will get is a deleted blog, with the URL locked to the current owner, for eternity. And neither of you will have a blog, published to that URL.

>> Top

Wednesday, 15 August 2012

A Team Blog With No Administrators Is Given To The Authors, For Their Control

We have known, for a while, that every Blogger blog has to have at least one administrator.

That rule is enforced by the Permissions wizard, which gives any administrator the choice to demote or remove any administrator, from the Permissions list - but only when there is at least one other administrator in the list.

When the Permissions list is displayed, if there are at least two members with administrative authority, each administrator entry, in the list, has a link to demote or remove that member. If there is only one member with administrative authority, there is no such link - and that member can be neither demoted or removed from the list.

As long as only the Permissions wizard is used, to demote or remove administrators, this article would be meaningless (see the above link). But, there is another way for administrators to be removed - and this occasionally leaves blogs with no administrator.

If the only way to lose an administrator (or member) from a blog was by using the Permissions list to demote or remove, then the Permissions list setup, as described above, would be sufficient.

Unfortunately, the Blogger - and Google - account deletion processes don't consider the member lists for the blogs owned by the account. When a Blogger account is deleted, the fate of the blogs owned, by that account, has to be decided later.

Any blogs which have only one member (the owner) are either frozen or deleted - as with only one owner, there is no need to keep those blogs. Any blogs with more than one member simply lose that one member. But what if a blog has more than one member, but only one administrator - and that one administrator takes a hike?

With a team blog with one administrator, and one or more authors, losing the one administrator would leave a blog that was being published (by the authors), but could not be managed (because there was no administrator). This would, in the past, lead to panic in the forum.
The administrator for my blog deleted his Blogger account - and now my blog has no administrator! What do we do now?

With no administrator existing, Blogger Support would be summoned, and would have to determine whether a blog:
  • Had no administrators.
  • Had at least one author.
  • Was being requested by a person who had a legitimate need to request control (a former administrator, or a current author).
Failure to ensure that each condition was being properly met could, with the right problem report, allow a hijacker to improperly assume control of someone's blog - with only Blogger Support to blame for enabling the hijacking.

To allow control recovery without needless delay, and avoid the need for endless detail in verifying any such panicky report, Blogger Engineering made a simple procedural change. The "Forgot your username or password?" wizard, when control recovery is requested for a blog with no administrator, simply sends the appropriate access tokens (aka "login instructions") to all blog authors - as long as the membership list is well maintained.

Any blog authors, able to receive the login instructions, then become de facto administrators - and can jointly determine the fate of the blog. The control recovery process can be automated, and the risk of possible hijacking of actively owned (administered) blogs is reduced. This simply requires that at least one blog author uses a Blogger account based on an active and genuine email address - and if necessary, can search persistently for the email sent.

When this reset process is done, each author of the blog initially has the same power as each of the other authors. Blogger leaves it to all authors to act honourably - and to politely choose one or more authors to be administrators. As long as the author submitting the reset process is able to locate the email message in his Inbox immediately, he can make himself the sole administrator - if he decides.

If one of the authors has problem locating the email, it's possible that the other newly appointed administrators could unwisely hijack control of the blog. If this happens, it will be up to the authors to jointly establish order. Blogger Support will not be involved in any conflict.

The more authors a given blog may have, the greater the chance that one author, receiving the email message, may act dishonourably, and hijack the blog. In cases where there are a large number of authors (precise number not known, right now), Blogger will defer to the author requesting the reset.

In this case, the author requesting the account reset can enter his email address, that is used by his Blogger account, to have the password reset email sent directly to him.

>> Top

Monday, 13 August 2012

Claiming A Brand Name Based BlogSpot URL

Periodically, in Blogger Help Forum: How Do I?, we see a hopeful query.
How do I claim the brand name URL for my clients blog?
Many merchandisers are unaware of the simple Blogger / Google policy
Blogger accounts and Blog*Spot addresses do not expire.
Another way of saying that would possibly be first come, first served.

If the clients brand name is a registered trademark, you may be able to report a DMCA Violation. This action will likely get you two things.
  • The offending blog may be deleted - with the URL locked to the current owner, for eternity.
  • You (your clients company) may get some bad PR.
You probably won't get a third thing.
  • The immediate use of the trademark URL.

To avoid bad PR, you might make up for the inconvenience, and compensate the current owner to have the URL transferred to you - but you may have to provide compensation, imaginatively. Traditionally, Google forbids us from selling Blogger / Google resources - including URLs.

Blogger supports our right to publish our blogs, anonymously. If the current owner, of the blog in question, can't be contacted directly, you may have to do some research to find the owner, or - again - get a court order.

If you do manage to contact the owner, and arrive at an understanding where you are offered control of the blog, have the URL transferred to you, properly.

>> Top

Tuesday, 24 July 2012

Having A Blogger Blog Removed Or Restored, After Death Of The Blog Owner - The Next Chapter

The question of disposition of blogs, left behind by deceased blog owners, comes up in Blogger Help Forum: How Do I?, from time to time.

As Blogger blogs - and similar Google products - become mature, and as more people who publish Blogger blogs become susceptible to old age and death, this problem will become more critical. As recently as 2010, in order to assume control (or request deletion) of such a blog, Blogger required only a faxed copy of the death certificate.

We are now seeing that the death certificate is only one part of a formal procedure, which Blogger / Google now uses, in the dual role of
  • Compassion, in allowing a friend or loved one to appropriately assume control of blogs left behind.
  • Due Diligence, in preventing fraudulent claims by people who have no legal or moral right to assume control of blogs.
Both roles are righteous, and are needed to help Google reduce hijacking of active Blogger blogs.

As part of an improved procedure for disposition of Blogger blogs left behind by deceased owners, Blogger now uses GMail Help: Accessing a deceased person's mail as guidelines. The new guidelines
  1. Use a two part process - a preliminary review, followed by a formal court documented process.
  2. Include a dedicated facsimile transmission / postal mail address.
  3. Include additional requirements, which formally identify the relationship of the person requesting control of the blog in question, to the deceased.

The preliminary review specifies a facsimile transmission / postal mail address:
Google Inc.
Gmail User Support - Decedents’ Accounts
c/o Google Custodian of Records
1600 Amphitheatre Parkway
Mountain View, CA 94043
Fax: 650-644-0358
and a formal list of material required, for Part 1 - preliminary review.
  1. Your full name.
  2. Your physical mailing address.
  3. Your email address.
  4. A photocopy of your government-issued ID or driver’s license.
  5. The Gmail address of the deceased user.
  6. The death certificate of the deceased user. If the document is not in English, please provide a certified English translation prepared by a competent translator and notarized.
  7. The following information from an email message that you have received at your email address, from the Gmail address in question:
    • The full header from the email message. See instructions on how to find headers in Gmail and other webmail email providers. Copy everything from 'Delivered-To:' through the 'References:' line
    • The entire content of the message
When specified by Blogger Support, we were instructed to substitute the blog URL, for the Gmail address (as #5). No addendum referencing the email message (as #7) was provided.

The instructions for Part 2 are not as well defined, as for Part 1.
Part 2 will require you to get additional legal process including an order from a U.S. court and/or submitting additional materials. Please note that submitting these materials will not guarantee that we will be able to provide Gmail content so we recommend not embarking on Part 2 until you hear back from us regarding Part 1.

These requirements may seem onerous to the less observant. Actually, by formalising the process, this should reduce the number of fraudulent claims, and make it easier for Google personnel to legitimately process claims, while exercising both compassion and due diligence.

>> Top

Friday, 6 July 2012

Blog Control And URL Availability Hacking - Four Sides Of The Same Story

Occasionally, in Blogger Help Forum: How Do I?, we see various queries about our blogs, and how to gain or regain control.
  • How do I get a blog, which is attacking me (impersonating me, insulting me, publishing my secrets), removed from Blogger?
  • How do I claim a dormant URL?
  • How do I recover control of my blog?
  • My blog is now under somebody else's control! How do I get my blog back?
In some cases, all of these queries are simply one more attempt to gain control of a blog, or a URL. As we gain experience in reading between the lines in Blogger Help Forum, and as Blogger Support gains experience in researching blog histories, we can start to see patterns, and signs of multiple attempts to assume control of the blog - or the URL - in question.

Many blog or URL hacking attempts start quite innocently. Two of the more common ones are quite naive, and completely separate, tales.
Some people, denied recovery of the blog, because they can't prove ownership, will try another tactic.
I'll tell them that the blog was stolen from me. Surely if they think the blog was hacked, I can get it back, since I used to be the owner!
People trying to gain control of a dormant blog will likewise use their imagination.
If I get the blog deleted as spam, I can grab the URL. Surely a Dormant blog is just another type of Spam, in Blogger!
Unfortunately, these techniques have been used, already - and have resulted in still other tales of anguish.

It requires the wisdom of Solomon - and the patient persistence of Gil Grissom - to sort through the problems reports. Claims
I just graduated from college, and I can't use my email address to recover the password!
and
I just woke up from a 7 year coma, to find my family blog under control of a hacker!
and let us not overlook
My friend just died. Can I please have control of the blog, so I can put a notice to all of his friends, on the blog?
and
I never updated my Blogger only account to a Blogger / Google account - and I never got any email, warning me of the impending change!
All of these tales have enormous human interest - and seem to justify mercy for the plaintive requests.

Unfortunately, these stories - and others like them - are not always what they seem. What we sometimes see are the other side of the story.
  • Attempts to steal control of an active blog.
  • Attempts to gain control of the URL which would be perfect for their new blog, if only the URL was available.
  • Attempts to probe and reveal the identity of a blog owner, who is guaranteed anonymous blog ownership, by Blogger policy.

So, if you beg and plead for attention
None of these tools help me, in the least. Can I please speak to a live human, so I can explain my special need?
Please, do not be surprised to be directed to read about why Blogger Help is the only contact, and why you absolutely must prove ownership of the blog, before being given control. And even the ultimate insult, you must provide a copy of the death certificate plus get a court order, as you grieve for the loss of your friend or loved one.

The bottom line here is that, if you intend to publish a Blogger blog, it is your responsibility - and only your responsibility - to maintain control of your blog. You are an adult (or are presumed to be one) - and you have responsibilities, as an adult.

>> Top