Export / Import Requires Administrative Control Of Both Blogs

Occasionally, in Blogger Help Forum: How Do I?, we see the naive query

How do I merge my two blogs, using Export / Import?

When given the simple advice

Use the "Export blog" and "Import blog" wizards, both in the dashboard Settings - Other menu.

the immediate response is

I don't have that menu item!

This person has, most likely, lost control of the Blogger account.

In order to avoid encouraging scraping of blog contents, both the Export and Import wizards are only available to blog administrators. Not everybody wishing to use "Export blog" has blog ownership, however.

Too many people, denied immediate recovery of control of their blog, just start another blog.

With a new blog, the first thing needed is the content from the old blog. This is not easily had, however - because both "Export blog" and "Import blog" are part of the Blogger dashboard - and can be accessed only by blog owners.

If anybody could use "Export blog", and export the comments and posts from any blog, "Export blog" would be a very popular wizard - to blog thieves. To encourage Export / Import to be used for legitimate purposes, Blogger made it part of the Blogger dashboard - where it is accessible only to blog administrators.

This does not provide a solution for people who have lost control of their Blogger accounts - and who naively figure to start a new blog, and move the contents of the old blog to the new blog. If you're in this situation, you have only two possibilities.

1. Recover comments and posts using blog feeds and online cache.
2. Cluster the new and old blogs - but asymmetrically.

You can link from the new blog back to the old blog, using any combination of imaginative techniques - but without control of the old Blogger account, you're simply not going to be able to link from the old blog to the new blog.

Sorry. Once again, you have to always retain control of your Blogger account.

>> Top

Team Blog Ownership, And Abuse Classification

We see some people, posting in Blogger Help Forum: Something Is Broken, who have problems with blogs under team ownership, and abuse classification.

My blog was deleted as spam but I don't spam! BTW, one of the other administrators of my blog recently had his Google account blocked.

We've observed, a few times, that team blog relationships create interesting complications, with various Blogger issues - and this appears to represent yet one more complication.

In most cases, when a Blogger account or blog is deleted or locked, the owner of the account or blogs affected should see an online notification, and / or receive email informing of the action taken.

There are several reasons why notification - email or online - may not always be provided.

• Blogger accounts, based on bogus or inactive email addresses, will not provide email notification.
• A person who uses multiple Blogger accounts, accidentally or intentionally, will only see the dashboard for the account currently logged in.
• An owner of a Blogger account, recently unlocked after detected suspicious / unusual activity, will see only an empty dashboard, when logging in.

The team blog ownership relationship appears to provide one more reason for lack of notification.

• Administrators of blogs under team ownership may not see notification, when one of the team members has a Blogger account deleted or locked.

Both Blogger accounts deleted for non repentant abusive activity, and Blogger accounts locked when suspicious / unusual activity is detected, appear to present this complication, with blogs under team ownership.

When a Blogger account is deleted after the owner repeatedly produces TOS violations, all blogs owned by the account are apparently deleted. It's possible that, when a blog is deleted, team ownership issues are overlooked in the blog deletion process - and the blog simply disappears from the dashboards of the other team members. It's also possible that this is a predictable group action - comparable to affiliate network detection.

When a Blogger account is locked after suspicious / unusual activity is detected, all owned blogs simply disappear from the dashboard of the owner. Blogs owned by a locked account are under automatic security review, with no appeal by the owner being possible. Team administrators are unlikely to have any alternative appeal opportunity, for a blog under review when an owning account is locked.

The latter two scenarios represent two reasons why, if we see the complaint in Blogger Help Forum: Something Is Broken

My blog has disappeared from my dashboard, and is not online!

One initial question should be

Was the blog under team ownership?

>> Top

Diagnose Problems Using Differential Testing

Sometimes, you may find yourself reporting a problem, in Blogger Help Forum: Something Is Broken - and observe that nobody else has the same problem.

If there's any normal problem activity in the forum, you might find yourself waiting - in vain - for an immediate answer to your problem report. While you wait for advice, why not do some basic analysis of your problem?

A differential test set of your problem, based on some reasonably basic details, can help you see where many problems may originate.

Sometimes, you can identify the basic source of your problem - or at least, offer some ideas to a forum helper.

Similar to affinity testing, differential testing can be a big help when you have a problem. Here are a few simple differentials, which you can perform, with a little determination and planning.

1. Account. Use a different Blogger account, and try the same procedures against your blog.
2. Blog. Setup a different blog, and try the same features and procedures on the other blog.
3. Browser. Use a different browser, and try the same procedures on your blog.
4. Computer. Use a different computer, and try the same procedures on your blog.
5. Connection. Use this browser / computer from a different Internet connection - or use a different computer which uses a different Internet connection - and try the same procedures on your blog.
6. Logout. Logout from Blogger completely, when diagnosing a problem that involves viewing the published blog.
7. Posts. Identify the last few posts, published before you first observed the problems. Edit those posts, and save them as Draft copies.
8. Template. Change the blog, to use a different template.

Maybe, you can think of still more differential tests.

By changing exactly one significant detail at a time, and carefully observing the result of the change, you can at least get an idea what actions which you may have made, to contribute to the problem.

Use a different Blogger account, to maintain / publish your blog. As an alternative, first clear cache, cookies, and sessions (yes, all 3, in this case!), then restart the browser. A second alternative would be to use an "incognito" / "private browsing" window, in this browser. Both alternatives may complement each other, when used simultaneously.

Set up a different blog, with similar features / content. As an alternative, ensure that your blog uses a standard Blogger template - then reset the post template, and remove any shiny third party accessories. Note that all problem third party code may not have been recently installed - but may still cause problems.

Use a different browser, to maintain / publish your blog. As an alternative, ensure that you have the latest browser update - then disable all add-ons and extensions, in this browser. The "incognito" / "private browsing" window may be useful, in this case also.

Use a different computer, to maintain / publish your blog. As an alternative, check (and update) all cookie and script filters, on this browser / computer.

Use a different Internet connection, to maintain / publish your blog. As an alternative, try changing your Internet address - if your ISP will permit this.

For problems which involve viewing the published blog, logout completely from Blogger. As an alternative, first clear cache, cookies, and sessions (yes, all 3, in this case!), then restart the browser. A second alternative would be to use an "incognito" / "private browsing" window, in this browser. In this case, all three alternatives may complement each other, when used simultaneously.

Remove any recently published posts, from the blog. As an alternative to deleting your recent work, edit each questionable post and save it as draft.

Use a different template, on this blog. After changing the blog template, remember to reset the post template. As an alternative, reset all gadgets and the post template. If you're using a custom, third party template, update to a Blogger standard.

If you have any experience with Blogger problem analysis and resolution, you'll note that none of the alternatives, suggested above, will create the full effect of the specific differential. However, each alternative will give you a partial differential - if the complete change is not convenient.

Many Blogger problems start with you - and can best be reproduced by you. That being the case, it's best that you try to reproduce the problems (or "bX codes"), through a differential analysis - and observe the results of your tests.

The best idea here is to try at least 2 differentials.

• Make one change at a time.
• Observe the results of each change, separately.

If you try a different browser - and magically the problem goes away, you're good - for right now. But what happens next week, if you experience a different problem? Do you want to try a third browser?

How many browsers can you use - and break - before running out of browsers, that you like? Using a second or third differential, now, may help you more precisely identify the cause of the problem - and that's when you are more likely to get the attention of Blogger Engineering.

It's a lot more useful to diagnose a problem, with you carefully making changes, and observing what happens, then it is for you to report

I can't see my blog!

and get the reply

Your blog is fine!

High level (differential) testing can go a long way, towards getting a problem identified - and possibly, resolved.

>> Top

Automatic Sharing Of New Posts, To Google+, Is Here

Almost 3 years ago, Blogger introduced easy sharing of new Blogger posts, to Google+.

This week, they took the next step. For those blogs associated with a Google+ page or profile, you can share new posts, Publicly, automatically.

Starting today you can automatically share your blog posts publicly to Google+ — as soon as you publish them, with no additional clicks.

Just select "Automatically share after posting", and you're ready to share new posts, publicly, as soon as they are published.
When you share automatically, it's absolute and immediate.

• Everything gets shared to Public - no Circles selection.
• No Comment addition.

But, for those who like a no option sharing, it's here.

We see in Google Help: Automatically share to Google+, some interesting advice.

Automatic sharing to Google+ is enabled by default on all public blogs linked to Google+ pages or profiles.

If you setup a new blog, you might do well to check the setting, before publishing your first few posts.

>> Top

Repeated TOS Violations Are Punished Gradually

Some blog owners don't understand the serious nature of repeated violation of TOS Policy, in Blogger blogs - and how offenses are handled, by Google.

We've seen several reports, in Blogger Help Forum: Something Is Broken, from blog owners who appear to be unclear about the consequences of repeated TOS Violations.

I got email from Blogger, about my Blogger account.

We'd like to inform you that we've received another complaint regarding a blog that you administer. Upon review of your account, we've noted that you've repeatedly violated the Terms of Service: http://www.blogger.com/go/terms. Given that we've provided you with several warnings of these violations and advised you of our policy towards repeat infringers, we've been forced to disable your Blogger service.

How do I get my blog restored?

This example appears to represent the final step, in a multi step policy.

It appears that Google takes a multi step approach, towards repeated TOS violations - such as hosting of malware, porn, and / or spam - in Blogger blogs. This is similar to the DMCA Violations punishment process.

1. Unlike DMCA violations, individual posts are not deleted.
2. Deletion of offending blogs.
3. Deletion of offending Blogger account(s) (and blogs).

With a TOS initiated blog deletion, the blog owner is expected to have the blog reviewed. If the review determines the blog to be unrighteously deleted, the blog is restored - though there may be side effects.

If the blog owner does not wish to have the blog reviewed, he / she is allowed to start over, with a new blog - but will have to publish to a new URL. Content lost must be recovered by the owner - and the owner should be more careful with future blogs.

If the blog owner continue to publish blogs which violate TOS, any Blogger accounts involved, along with any other blogs owned by the deleted accounts, will be deleted.

We see that an appeal is possible.

Next steps for suspended accounts: If you believe your access to this product was suspended in error, contact us.

With any blogs published to a non BlogSpot domain, the domain URL(s) will remain in use, in the Google database - though the domain owner is free to use the domain outside Google address space. If the offender wishes to start over, both new BlogSpot and non BlogSpot URLs will be required.

As with other issues with email delivered warnings, there will be cases when the owner may not receive warnings in a timely fashion. Even so, the owner is responsible, when he / she offends, repeatedly.

Blogs under team ownership are apparently vulnerable to action taken against any team member. In some cases, blogs will simply disappear from the dashboards of the other team members, with no appeal or review request being possible.

It's possible that legal notice, provided by Google through email, will supercede ongoing forum advice - even if email sent is not received by the owner.

>> Top

Repeated DMCA Violations Are Punished Gradually

Some blog owners don't understand the serious nature of DMCA Violations in Blogger blogs - and how offenses are handled, by Google.

We've seen several reports, in Blogger Help Forum: Something Is Broken, from blog owners who appear to be unclear about the consequences of repeated DMCA Violations.

I got email from Blogger, about my Blogger account.

We'd like to inform you that we've received another complaint regarding a blog that you administer. Upon review of your account, we've noted that you've repeatedly violated the Terms of Service: http://www.blogger.com/go/terms. Given that we've provided you with several warnings of these violations and advised you of our policy towards repeat infringers, we've been forced to disable your Blogger service.

How do I get my blog restored?

This example appears to represent the final step, in a 3 step policy.

It appears that Google takes a 3 step approach, towards DMCA violations. This is similar to the TOS Violations punishment process.

1. Deletion of offending posts.
2. Deletion of offending blogs.
3. Deletion of offending Blogger account (and blogs).

We've noted the initial step - deletion of offending posts, before. Specific blog posts, which are identified as DMCA Violations, are saved as Draft content. This allows the blog owner to correct the offense, and re publish a corrected post, without losing the content.

If the owner chooses to ignore the initial DMCA Violation, and simply re publishes an offending post - or if the owner publishes multiple offending posts, the blog is deleted. The owner is free to publish another blog, at his convenience - but the offending blog is not recoverable.

If the owner publishes a new blog, containing the same offending material - or if the owner publishes multiple offending blogs, the Blogger account (and blogs) is deleted.

As with all email delivered warnings, there will be cases when the owner may not receive warnings in a timely fashion. Unfortunately, the owner is responsible, even so, when he offends, repeatedly.

>> Top

Use Google 2-Step Verification, To Protect Your Blogger / Google Account - And Your Blogs

Our Blogger accounts, and blogs, are under persistent attack by some rather nasty Internet users.

Hackers, using other peoples computers, are constantly attempting to "guess" our Blogger passwords, and take control of our Blogger accounts and blogs. Blogger accounts are particularly vulnerable to attack, because too many blog owners

• Reveal their account names (email addresses) to the world.
• Base their passwords upon real life details.
• Publish blogs, where their real life details are visible to the world.

Some blog owners think that by using only one computer forever, they should be able to register that one computer as theirs, and require Google to simply deny access to their Blogger / Google accounts, from any other computer. This is a very simple solution - and it's one which is doomed to failure.

Google knows that even the most careful person will periodically use a different computer - or possibly forget their Blogger account name and / or password.

Rather than attempt to restrict us to using one single computer, for eternity, Google gives us an option to use a previously registered telephone as an authentication token, whenever we use a different computer. The telephone can use either text or voice, and provide us with a one use passcode, to enter after we successfully enter our account name and password.

This is not a foolproof solution.

• Some people will not want to provide their phone number, to Google.
• This strategy will only work with a preregistered phone - and registration can only be done when we are logged in to Google.
• If the pre registered phone uses text (a smart phone / mobile computer), it will be usable only where cellular service is available.
• If the pre registered phone uses voice, it will be usable only as well as we understand computer synthesised "speech".
• In either case, in some cases, stress will contribute to the possibility of making a mistake.
• Since a pre registered phone is required, we will be able to use this only as long as we carry our smart phone - or login from a pre determined location.

However, if we can deal with the above drawbacks, we have a much better chance of keeping our Blogger accounts and blogs under our control. Very few hackers, having successfully provided our account name and password, will be able to immediately use a pre registered telephone, to accept a one time use passcode.

>> Top

Renewing Your Custom Domain Registration

Some Blogger blog owners, having experienced the anxiety of custom domain setup, intend to carefully maintain their domain registration.

We see a few queries, in Blogger Help Forum: How Do I?, about domain registration renewal.

How do I make sure my registration gets renewed?

or

How do I renew registration before it expires?

or, possibly

My blog now displays a search page! Have I been hacked?

Some registration issues will depend upon how the domain registration was originally purchased.

Domains purchased directly from a registrar - whether using eNom, GoDaddy, or a third party registrar, will have to be renewed directly from the registrar. It's not possible to migrate a direct purchase to Blogger / Google registration for payment, any more than to use the Blogger / Google automatic DNS setup. Once you purchase domain registration from a registrar, you are on your own.

If you used Blogger "Buy a domain", Google Apps, or Google Wallet, to purchase the domain registration, you should get email reminders when registration is expiring. However, this will depend upon whether your Blogger / Google account, under which you purchased the registration, uses an active and accessible email address.

If you choose to anonymise yourself by using a bogus or inactive email address for your Blogger or Google activities, don't expect to get email reminding you, or allowing you to renew domain registration.

The most reliable way to assure the domain remains registered is to use domain auto renewal. You can check your auto renewal settings using the Google Apps administrator account, for the domain (now called the "Admin Console").

For domains purchased before December 2012, you'll use email from Google Apps, or an entry in your Google Wallet log, to retrieve the token to setup your Google Apps account. For domains purchased after November 2012, you will have only a limited access Google Apps account, which you should reset the password, to access.

If you intend to use domain auto renewal, make sure that the bank account (credit, or debit) is active, and currently paid. If your bank rejects the payment, you should get a notice - but again, this will come reliably when the email account associated with the domain is active and accessible by you.

If you do not renew registration on time, depending upon the registrar, the domain may be changed to point to a domain parking server, where the registrar will serve ads. Some registrars will serve ads which you, or your readers, won't appreciate.

If the domain registration has expired, and the domain was purchased from Blogger / Google, you may be able to submit late payment, and renew now.

If your original charge fails and you’re unable to resolve the form of payment issue within 7 days, you may still be within the grace period for renewals. If you’re still within 19 days of the renewal date, you can try again using any Google Wallet account by visiting http://www.google.com/a/cpanel/domain/renew-domain/primary-domain-name, where primary-domain-name is the domain name you are trying to renew.

In some cases, once late payment has been processed, your registration may resume, with no long lasting ill effects. In other cases, you may end up having to setup the DNS addresses.

The best renewal experiences, of course, start with advance planning.

>> Top

Recovering And Protecting Your GMail Account

Blogger blog owners may have productive action, when their Blogger accounts are successfully hacked through an attack on their GMail accounts.

GMail account owners can get detailed instructions on recovering a successfully hacked account, and on preventing future hacking attacks from being successful. Some of the instructions are specific to GMail use - but overall, Blogger account owners will benefit from their use.

To benefit from the GMail instructions, one should consider the differences between Blogger, email, and Google accounts.

Gmail Account Recovery: Gmail Account Recovery and Security provides complete and detailed instructions for recovering a hacked and stolen GMail email account.

The Recovery instructions include specific mentions of Disabled / Suspended accounts, successfully Stolen accounts, and accounts locked or deleted because of Underage owners.

Accompanying the recovery advice is Gmail help and information: How NOT To Get Hacked. These are instructions for preventing a recurrence of a reported problem. This includes discussion of using a strong and secure password, identifying hacking techniques that involve the account owner, and preventing attacks which are conducted using the computer or network in use by the account owner.

The Prevention instructions, many which are common sense issues to any IT professional or security expert, are specifically written to apply to GMail account owners. There may be additional issues which apply in general, to Blogger accounts - and specifically, to Blogger accounts which are based on non GMail email accounts.

There are a few differences between Blogger blog ownership and GMail account ownership, which will cause issues that cannot be easily resolved by Blogger Support, or by GMail Support, to the satisfaction of the (former) blog owner.

GMail accounts are, by nature, single owner - and ownership of a GMail account is never transferred. In contrast, Blogger blogs can be under team ownership - and ownership can be transferred.

• Intentional team blog ownership. Team blog ownership can cause problems with loss of blog control, when all known blog administrators (accidentally or intentionally) remove themselves as administrators, leaving an unknown administrator.
• Intentional transfer of control. A blog owner may assign administrator status to another person, voluntarily - then later regret his decision.
• Un intentional transfer of control. A blog owner may assign administrator status to another person, voluntarily - and the other person may then remove the former owner administrator status.
• Ownership theft after account hacking. A hacker, having temporarily gained control of a Blogger account, may transfer ownership of a blog to another Blogger account.

All of these scenarios are regarded as simple transfer of blog ownership, by Blogger Support.

Though maybe not preferred by the (former) blog owner, the blog in question will now be under control of another person. It's possible that some of these scenarios are considered by Google Security, when reviewing Blogger / Google accounts after hacking activity is detected.

Blogger accounts, based on non GMail email addresses, will be subject to the typical uncertainty which accompanies any third party service in Blogger. Some details may be involve the email provider, while others will involve Blogger - and arbitrating between the two will be the responsibility of the Blogger account owner.

Owners of Blogger accounts which are based on non GMail email addresses will need to contact the providers of the actual email service, for resolution of some of these issues.

In general though, the GMail Account Loss Prevention and Recovery instructions provide good advice, for any Blogger account owner.

>> Top

Problems Being Observed, In Blogs Now Using Google+ Comments

A few blog owners, eagerly opting to use the latest Blogger enhancement, Google+ Comments, are seeing some changes which they did not anticipate.

Even after checking all of the settings, some blogs, with Google+ Comments enabled, may not show the comment form - or may show the form, but comments may not be visible. Besides the visibility of the form, there are other changes which some blog owners don't appreciate.

In many cases, Google+ Comments, like other new features, require an updated post template. This will be seen in blogs with customised post templates, most frequently - although newer, less customised blogs also may need a post template reset.

After getting Google+ Comments working in general, some blog owners find other unexpected changes.

• Almost the entire "Comments" section, in the dashboard Settings - "Posts and comments" wizard, will disappear - though "Comment Location" will remain - and will default to "Embedded". None of these settings are relevant in Google+ Comments. On some blogs, there may be no "Comments" dashboard menu entry at all.
• There are no controls for moderation, or for notification, of comments.
• There is no ability to moderate comments, from the dashboard. Moderation is done under each post, one post at a time.
• As a blog owner, you have no special ability to moderate comments, made against your blog.
• There may be some comments, which you may not be able to moderate - but will publish against your blog.
• If you Block somebody from Following you, that person may still be able to post a Comment on your blog. When you look at the comments, you will only see

  This post is hidden because you have blocked the author.

• People without Google+ accounts won't be able to make - or view - comments (since comments are Circle dependent).
• Visibility of the comment form, as with all embedded comments, is sensitive to cookie / script filters, on the client computers.
• Comments posted outside Google Comments may not be immediately visible, though the comments remain in existence. Resetting various sections of the template may resolve this, when observed.
• If you change the blog address - with either a simple BlogSpot address change, a non BlogSpot address republishing (aka "custom domain"), or export / import - existing Google+ Comments may not remain visible, with the blog. This may be a similar problem, with URLs subject to Country Code Aliasing.
• With a blog using Google+ Comments, the Comments newsfeed will not be published. Any "Recent Comments" gadgets will be useless.
• The "Export blog" wizard, which used to export both comments and posts, will only export posts.
• The comment count, as displayed in the blog main page display, may show "0 comments" - even with comments actually present, and visible when clicking on "0 comments".
• You may or may not get email notification of comments, when comments are not shared specifically with you - even if you own the blog. Other people, who do not own the blog, may get notifications when you do not.

Fortunately, in most cases any prematurely made decisions are reversible. Go to the dashboard Google+ menu entry, and unselect "Use Google+ Comments on this blog". The blog will simply return to native Blogger based Comments. Any comments made under Google+ will not be visible to you, from the blog - but everything else should return to normal.

I've now added a Problem Rollup discussion, in Blogger Help Forum: Feature Suggestions and Feedback, where your opinion is appreciated. Please be objective.

See my test blogs Google+ Comments, Dynamic Template Test and Google+ Comments, Simple Template Test if you wish.

Click here, for instructions to revert back to Blogger based comments. Note that you will lose ability to view all Google+ based comments - though the comments will still exist.

>> Top

Blogger And Google+ Continue To Move Ever Closer Together

Today, Blogger announced the most innovative step in integrating Blogger and Google+, since sharing of Blogger posts to Google+.

The December 2011 sharing option lets us publish our blog posts to Google+. Today, Blogger added the ability to do the same - and more - with our blog comments. Like basic Google+ post sharing, Google+ Comments will be shared, and be visible, on a Circle by Circle basis.

The ability to post a comment, against a Blogger blog post shared in Google+, and have the comment publish to the blog will make for interesting comment based conversations.

There will be challenges to this feature, however. One of the most annoying problems with Blogger comments, right now, involves the embedded comment form, and security limitations caused by cookie filtering on many readers computers.

This blog uses a full page comment form, because too many of my readers need to post comments, in spite of the cookie filtering on their computer. Blogger Google+ Commenting requires use of the embedded comment form.

Google+ Comments lets you bring the following conversations together in one place, right under your blog post:

• Comments made on your Blogger blog post
• Comments on the blog post that you’ve shared to Google+
• Shared content on Google+ that links to your blog post

Readers will need a Google+ page or profile to comment on your blog.

Anybody who publishes a blog, and has readers who do not understand the reason for allowing third party cookies, will not want to use an embedded comment form - and won't benefit from Google+ Commenting, either. Until either

• Blogger resolves their "third party cookies" problem, with the embedded comment form.
• All Blogger blog readers resolve their issues with filtering "third party cookies".

Google+ Comments will have a limited audience.

Many blog owners may find a problem, in the moderation process.

Once you enable Google+ Comments, you can moderate comments within the blog post itself.

Owners of large blogs may not enjoy having to check each post, one by one, to moderate comments.

I check my dashboard Comments menu, several times daily - and see all comments posted to the blog, in one convenient place. Having to look at each post, to moderate comments, won't be as convenient.

A third challenge will come from blog owners who want everybody to be able to comment, on their blogs. Requiring a Google+ account to comment won't be widely accepted by blog owners who have readers who comment either Anonymously, or using an OpenID.

One of the benefits of Google+ Commenting will be a reduction in comment based spam. The increasingly annoying "nice blog" spam - and the accompanying security risks from having it published on our blogs - should be eliminated, from blogs using Google+ Comments.

Google+ Comments is a feature that is needed, on some Blogger blogs - but it needs to remain optional, for some time.

If you're in one of my Circles, and wish to test this new feature, see if you can comment, on my recipes blog, Chuck's Kitchen.

>> Top

Browser Cache, And Confusion About Blogs Locked After Suspected Account Hacking

The effects of browser cache, upon our Internet life, are not always understood.

Most of us know, by now, to clear cache and restart the browser, after updating a blog, for consistent testing. Some folks know that blog security changes don't always take complete and immediate effect.

Recently, we're seeing a new effect, reported by owners of Blogger accounts locked, after hacking activity is detected.

I got a message mentioning suspicious account activity, when I logged in to Blogger. I provided my phone number, and I received a code on my phone, that I had to enter before I could then log in. My blog was working fine just after I logged in. A short while later, though, it was gone. Why was my blog deleted, because I unlocked my account?

This blog owner is just slightly confused, about the cause and effect here.

Google robotic processes are constantly monitoring account login activity, and watching for signs of hacking activity, such as brute force password entry.

When hacking is detected, the detection may not be immediate - so Google protects us by considering the possibility that the hacking could have been successful, and deletes or locks blogs owned by the account under attack. The blogs in question are taken offline, immediately, when hacking is detected.

If a blog owner has just been working on a blog, as is frequently the case, the blog contents will be cached somewhere between the owner and the Blogger servers. Blogger can take the blogs offline, on their servers - but any cache containing the blogs will remain. If the blog owner is working on a blog while the Blogger account is under attack, what's in cache will remain, visible to the owner, until cache expires.

If a Blogger account is attacked, and the attack is detected, shortly after the owner has viewed a blog, what's in cache will be used, until it expires. The owner won't see the effects of the blog being deleted until the cache expires, and the browser tries to retrieve a fresh copy from the Blogger servers.

The blog owner sees the blog go offline shortly after he verifies account ownership, and thinks that the verification process caused the blog to go offline. In reality, the blog was taken offline before the owner even knew of "suspicious" account activity.

Now, the blog owner can do nothing, except wait until the account and the blogs are examined for signs of tampering. In some cases, no notification of progress will be received - and the owner will see the blog(s) returned to service, sometime later.

How much later the blogs return to service will vary widely, depending upon several details - and this variation, added to the uncertainty caused by cache latency, leads to mystery.

>> Top

Deleted / Locked Blogs Have Several Causes, And Various Resolutions

Many blog owners are occasionally confused, by the effects of several Blogger / Google security processes, when they are simply trying to login to Blogger and work on their blogs. We see the agony, daily, in Blogger Help Forum: Something Is Broken.

The side effects of the security processes are similar - and depending upon various owner specific details, can be easily confused for each other. The possibility of confusion requires careful initial analysis, when we are faced with an angry blog owner.

My blog was deleted, by Blogger. How could they do this? I do not publish spam!

This is a typical problem report, which can reflect any one of the processes, each requiring different action in the forums.

There are various Blogger / Google security / TOS enforcement processes, each of which will cause a Blogger account and / or blog to be unavailable for full access, at any time.

• DMCA Violation looks for copyright and similar violations.
• Hacking detection looks for automated attacks against our Blogger accounts and blogs.
• Malware detection looks for malicious code installed in our Blogger blogs.
• Porn classification looks for blogs with adult content, and with unacceptable advertisements (aka monetised porn).
• Spam blog classification looks for Blogger blogs which contain spammy material or use spammy techniques.
• Repeated offenses can have gradually increasing severity of action taken.
• Owner deletion or rename may be confused with spam classification.
• Team blog ownership will affect blogs owned in common, by that team.

Each different process has a different effect on the Blogger account and blogs owned - and requires different attention by the blog owners, by the forum helpers, and by Blogger Support and Google Security.

DMCA Violation

Accounts and blogs can be deleted, for progressive DMCA violations.

The DMCA violation process originated with complaints made by the major entertainment industry content enforcement organisations, citing theft of "intellectual property" which they control. In the USA, this would involve the "MPAA" (Motion Picture Association of America), and the "RIAA" (Recording Industry Association of America). I have been told that similar content enforcement organisations exist in other countries.

In more recent events, private citizens have been known to use the DMCA Violation complaint process, for miscellaneous copyright violation reporting.

DMCA Violations have a formal complaint and appeal process.

Hacking detection

Blogger / Google network monitors are constantly analysing account login activity, and looking for signs of brute force password hacking. When hacking activity is discovered, the Blogger account - and all blogs owned by the account - are deleted and locked, pending account verification by the owner, and blog integrity checking by Google Security.

The blog owner, after changing the account password, solving a CAPTCHA, and / or verifying account ownership by providing various personal details, is left waiting for the blogs owned by the account to be examined for signs of abuse by the hacker. Until the blog(s) are returned to online status, they appear in neither the "Deleted blogs" or "Locked blogs" dashboard lists. The owner, even when logged in to the right Blogger account, simply sees the dashboard advice

You are not an author on any blogs.

In this case, neither the blog owner nor the forum helpers can do anything useful, except wait, anxiously - possibly, with no notice provided. The blog being offline may not be immediately observed by the owner - and this may cause more confusion.

Malware detection

Blogger robotic processes are constantly checking the various blogs, looking for malicious blog accessories, components, and scripts. When a blog is subject to "Malware" classification, the blog will appear in one of two dashboard lists, in sequence.

1. Initially, the blog will appear in the "Deleted blogs" list. While the blog is in "Deleted" status, the blog owner will be able to do nothing, except request "Restore".
2. Once the owner has requested "Restore", the blog is undeleted, and placed into the "Locked blogs" list. While the blog is in "Locked" status, all authors can access the blog to remove malware - but the blog remains offline, to all viewers. Once all malware has been removed from the blog, the owner can "Request Unlock Review".

If the blog remains in "Locked" status for over 48 hours, the blog owner may report this in the forums, and may request a manual review. The forum helpers, and online viewers, will generally see the blog displayed as "TOS violation".

This blog is in violation of Blogger Terms of Service and is open to authors only

Adult Content / Porn Detection

Blogger will soon classify and delete blogs with "adult content", which host advertisements to commercial porn sites. Like spam classification, this will probably involve both false negatives and false positives.

Spam detection

Blogger robotic processes are constantly checking the various blogs, looking for signs of spam activity and content. When a blog is subject to "Spam" classification, the blog will be displayed in the "Deleted blogs" dashboard list. The owner can do nothing, except request "Restore".

If the blog remains in "Deleted" status for over 48 hours, the blog owner may report this in the forums, and may request a manual review. The forum helpers, and online viewers, will generally see the blog displayed as "Removed".

Blog has been removed
Sorry, the blog at xxxxxxx.blogspot.com has been removed. This address is not available for new blogs.

Repeated Offenses

We have recently noted that repeated TOS Violations, involving DMCA, Malware, Porn, and Spam, are being dealt with in increasing severity.

Owner deletion or rename

Mistakes made by the owner can be confused with Spam detection. When a blog is deleted by the owner, it will appear in the dashboard "Deleted blogs" list for up to 90 days. During the 90 days, the owner (or a team member, when applicable) may "Restore" the blog. After the 90 days expire, the blog will be removed from "Deleted blogs", and will be unrecoverable. Besides being unrecoverable, no other details have been determined.

If the blog is renamed (published under a different BlogSpot URL), the external symptom may be similar to deletion by the owner.

Blog has been removed

Sorry, the blog at myblog.blogspot.com has been removed. This address is not available for new blogs.

In this case, the blog will be listed in the dashboard "My blogs" list, under the right Title. The owner needs to setup a stub blog, pointing the readers to the new URL.

Team Ownership

Any blogs owned by a deleted / locked Blogger account may simply disappear from the dashboards of other team members. If the Blogger account is not restored / unlocked, the blogs owned by that account - including any team owned blogs - may remain deleted - and inaccessible to everybody.

The Confusion Accumulates

Because of anonymous blog ownership, loss of account control, team blog ownership, and use of inactive or non existent email addresses, any account / blog which is deleted or locked for hacking (actively / as a victim), malware, and / or spam may not be easily discovered or recovered by the owner. These issues cause further confusion and frustration.

These scenarios may appear, to the untrained eye, to be signs of fraudulent, malicious, and / or petty actions by Blogger - and are loudly claimed so by spammers with their own agenda. None of these accusations are true - the above processes simply represent Blogger and Google attempting, in the best possible way, to protect everybody against the various hacking, malware, porn, and spam attacks which are constantly in progress.

>> Top

Check Your Template, And Look For Unfamiliar JavaScript Code, Following Odd Blog Behaviour

Recently, we've been seeing some odd problem reports in Blogger Help Forum: Something Is Broken, suggesting deviously hijacked blogs.

My blog is requesting me to login, using a user name and password, when I view it.

Given the URL of the window requesting the login, it's a simple matter for us to use the right forensic Internet software, and to locate a relevant snippet of code, frequently installed as part of the blog template.

Sometimes, when we reply to the blog owner with advice to remove a bit of dodgy code, we get a response suggesting disbelief. Our advice

Use the Template Editor, and remove the highlighted code snippet.

may receive a confused or skeptical response.

Where did that bit of code come from? I never installed that!

How did the code in question get installed? Discussion of one possible scenario may require thinking outside the box. Not every unrecognised blog change is being caused by memory loss by the blog owner, after an intentional accessory install or template tweak.

Looking at the subject / theme of some blogs involved in recent problem reports, we're seeing a beginning of a trend, which may indicate a new - and very subtle - blog hijacking technique. We know that Blogger blogs are subjected to brute force password guessing attacks, and we know that Blogger / Google has to consider the possibility that a brute force attack detection is made after the attack was successful.

Current blog security, and defense against blog hijacks, involves detection of hijack attempts, by Google Security. It's possible that some blogs, with some owning Blogger accounts and passwords, are more vulnerable to sophisticated password guess hacking.

When you login to Blogger or Google, you hopefully know the right account name and password, and are generally able to get logged in - after maybe one or two mistakes. You learn, soon enough, that if you have to guess your account name or current password - and you require more than a couple tries - you may have to solve yet another CAPTCHA, or request account unlock, to continue.

The ever unpopular CAPTCHA / locked account comes from Google, detecting a possible brute force attack in progress, and protecting your account and your blogs. A Blogger blog, with its content providing enough clues, combined with a simple account password that is easily guessed, may allow an experienced hacker to login to your account in one or two tries, without being detected by Google attack monitors.

It's alternately possible that some attacks are being conducted by very patient hackers, who are able to use days, and / or thousands of different computers, to conduct a throttled brute force password attack. Again, just attack without providing a detectable pattern.

This may help to explain the mysterious spam blog setups, of last year.

A hacker, able to login to a Blogger account without being detected, could install small changes in a blog template without ever being discovered. The blog owner would never discover subtle template changes, made by an easily satisfied hacker.

Finally, install latent code that does not activate immediately, as we observed during Winter 2009 / 2010, so no blogs show symptoms until the hack is installed on thousands of blogs. If one or two blog owners discover the odd code in their blogs, who would ever suspect their blog being part of a massive cloud of victims?

If you report odd behaviour by your blog, you write to Blogger Help requesting advice, and you are advised to remove a bit of dodgy code from the template - and you do not remember having installed the noted dodgy code - you may want to review your Blogger / Google password, and make the password harder to guess. Better still, start using 2-step verification for logging in to your Blogger / Google account.

>> Top

Confusion Over Recovery From Locked Blogger / Google Accounts

Not all blog owners understand the reasons behind the locked Blogger / Google accounts.

Even less understand why recovery of locked accounts, and of the blogs owned by the locked accounts, is not immediate. We see the occasional report, in Blogger Help Forum: Something Is Broken.

I had to change the password on my account - and now my blogs are deleted! Why should I wait another "24 to 48 hours" to get my blogs back?

This blog owner does not understand the possible reasons for the locked account - and the work that goes on after the account is unlocked.

Brute force hacking of our Blogger / Google accounts, by hackers / spammers, who have use of the various botnets in the Internet, is a constant activity. Opposing activity, by the Security teams in Blogger / Google, to not let hackers and spammers take control of our accounts and blogs, is just as constant.

Some of the Security activity requires our patience - and blog owners, having to recover their deleted blogs, are not always patient.

The Security processes, in Blogger / Google hacking prevention, have to work from a worst case scenario, when detecting hacking activity.

Account hacking cannot always be detected instantly. When hacking is detected, the hacking prevention process has to consider the possibility that the accounts under attack have already been compromised.

When Blogger / Google Security detects possible brute force hacking against an account, they lock the account - and delete the blogs owned by the account. Alternatively, they quarantine the computers used in the hacking activity. This is where we see the notice of "suspicious account activity" - and possibly the dreaded "403 Forbidden".

When we discover a locked account, and request its restore, the security process looks for signs of security weaknesses allowed by the account owners - or possibly added by the (temporarily) successful hacker. In some cases, the owner may be required to change the account password, and receive instruction on using a more secure ("strong") password.

Ongoing efforts by Blogger / Google, to make the account recovery easier for the blog owners to endure, may cause mystery about blogs missing from the dashboard, without obvious recovery options.

After the Blogger / Google account is restored, the integrity of the blogs owned by the account must be verified.

• The blog content must be examined for spammy content added.
• The blog Permissions list must be checked, for backdoor accounts added.
• The Mail-to-Blogger settings must be considered as a possible backdoor.

These are simply examples of what must be done, to ensure that our blogs were not compromised, even temporarily, by the hacking just detected. After you get your account back, it's not a bad idea for you to verify this, on your own. If you just got your blog back, after resetting your Blogger account password and / or verifying your phone number, check your template carefully, looking for references to unfamiliar JavaScript code, hosted outside Google address space.

The process of account and blog integrity verification will require an unpredictable time period - and needs to be done with the blogs inaccessible to anybody but the Blogger / Google security processes. The blog being offline may not be immediately observed by the owner - and this may cause more confusion.

Blogger Support is aware that nobody wants to deal with the stress of having a locked or deleted blog - especially after they have gone through the process of verifying their account. They are also well aware of the frustration that is present when someone reports

Somebody is publishing spam on my blog - and I can't access the dashboard to remove the spam!

Locking the owned blogs, after hacking activity is detected, complements the ongoing policy of not disclosing the account names, in helping to keep our blogs under our control.
>> Top

Blogger Comments Being Posted Using An Anonymous Blogger Email Address

Some Blogger blog owners use their Blogger blogs as the center of their peer to peer networking life.

Many blog readers are expected to post comments - and to leave their email addresses, as part of their message or profile, to allow direct contact. Long ago, I used the email address of my commenters, as part of an easy "Contact Me" form, on this blog.

Recently, we've been noting that Blogger comments don't always include a useful email addresses - many comments simply describe the commenter as

noreply-comment@blogger.com

Not all blog owners - and readers - appreciate this change.

When I leave a comment using my google profile, it isn't linking my profile with my email address. How do I get my email address properly displayed?

and

Why do so many comments, published to my blog, show the email address of "noreply-comment@blogger.com"? How do I email my readers?

For some time, we've known of the dangers of revealing your email address to the world, in general.

Blogger blog owners have been a known special risk, with their email addresses. Google developed Google+, with the Google+ profile, to allow everybody to network with their friends - both old and new - without the risk of revealing one's email address.

Google+ replaces email completely. You can share comments, messages, photos, and videos with anybody, in a self contained universe - and you can define your own, personal universes. This leaves the need to reveal your email address completely unnecessary (though you can use email, if you wish, without knowing anyone's address - or revealing yours).

After Google+ became popular, Blogger added the option to link our Blogger blogs with our Google+ profiles. Blogger profiles, based on Google+, are cleaner, and use the Google+ displays to update.

To encourage people to use Google+ for peer to peer networking activity, and to make our Blogger accounts and blogs safer, Blogger has eliminated our email addresses from all outside correspondence - including when we publish comments on Blogger (and non Blogger) blogs, using a Google+ based Blogger profile.

If we publish a comment on somebody's blog, and the blog owner has enabled comment moderation or notification, our comment shows up in the email inbox of the blog owner - but with our email address displayed as "noreply-comment@blogger.com".

With email addresses not displayed, this helps protect our Blogger account names from becoming unnecessarily revealed. Blog owner - reader comment communication is still possible - but again, without the email address of the reader being known.

Some time ago, I discovered an odd type of comment spam, which I termed "nice Blog" spam.

Nice blog. I will keep visiting this blog very often.

This spam, from what I can tell, has been published by the millions, in various blog comments. It's likely that this particular spam is being published as a very imaginative form of email address mining, and recently became even more imaginatively produced.

All that the spammer has to do is publish a spam comment, and select the option to "Send me replies". Any comments published later, and including the commenters actual email address, would be delivered directly to the spammers inbox. Knowing the email address - and the blog URL (how many comments do not include a link to a blog?) - the hacker would go straight to work.

Later, we would see forum reports.

I can't control my blog, any more - and somebody has updated it with spam!

This was a direct result of the former blog owner, having left a comment on somebody else's blog.

By eliminating our email addresses from our comments, Google is helping to protect our accounts and blogs, while letting us continue to comment on each others blogs - and to eliminate one type of unnecessary spam from our blogs.

Google+, which replaces email for networking, uses a "Friend of a Friend" relationship to let you expand your universe infinitely, with each comment, message, photo, and video that you share. It lets you control the expansion of your universe - if you wish. And, it helps keeps your Blogger blog under your control.

>> Top

Enabling Blogger, If You Now Have An ISP Provided Email Account, That Uses Google Apps Based GMail

We're seeing problem reports from some confused blog owners, who are apparently customers of ISPs who have made the switch, from using a private email infrastructure, to using GMail based email (administered using Google Apps).

When I try to sign in I get this message.

Blogger has not been enabled by the administrator of the domain

How do I administer my blog?

We've known, for a while, that having a Blogger account based on a Google Apps provided GMail account may not be a good long term strategy - particularly if the Apps account is based on a domain which you own, and the domain was purchased to host one of your blogs.

Possibly considering the latter scenario, Blogger / Google now requires that you enable the Blogger service, for any new Google Apps controlled domain - if you wish to use email addresses in that domain to host Blogger accounts. This is a safety measure, helping to prevent you from having a Blogger account that you can't control - or can't recover access when you forget the password.

All of that is fine - when you control the domain that you wish to use to host your Blogger account. But what if you don't control the domain? What if you previously setup a Blogger account based on your ISP's email domain - then later the domain administrator decides to upgrade the domain, to use GMail based email? What happens to your Blogger account?

Short of convincing the domain administrators for your ISP that you have a genuine and urgent need to have a Blogger account, based on an email address that they provide, you're going to need a new email address - provided by someone other than Google, or your ISP (school, employer, what have you).

Start by setting up an email account in some third party web service - maybe "Yahoo.com". Then, you have two possibilities. If you're reading this article just before your ISP makes the switch, and you can still use your Blogger account, transfer control of your blog(s) to a new Blogger account that's based on your new email address.

If you just discovered the change by your ISP - maybe because you now see the bad news

Blogger has not been enabled by the administrator of the domain

you are going to have to recover control of your blog, based upon access to your ISP's email account - and setup a new Blogger account based on your new non ISP based email account.

1. Generate a new account recovery email message.
2. Setup a new email account, outside your current email service.
3. Clear cache, cookies, and sessions.
4. Restart the browser.
5. Login to your current email service, find, and open the email message.
6. Click on the link in the email message.
7. Setup a new Blogger account, based on the new email address.

Whatever you do when setting up your new Blogger account, please make sure to verify the email address - and setup recovery options, carefully.

>> Top

Attempting To Remove Old FTP Published Blogs From Blogger Account Corrupts The BlogList

Recently, we've seen a few reports from unhappy blog owners who used to publish blogs using FTP, who tried to delete the FTP published blogs from their Blogger account, and now can't access their dashboard bloglist - or even login to their Blogger accounts successfully.

I recently tried to delete an old FTP published blog from our account, I hit the "delete blog" button, and I get error code bX-dm6o9e. When I try to access my dashboard, I get the same error.

The option to publish a Blogger blog to remote, non Google hosted, server space - known as FTP Publishing - ended several years ago. Now, people attempting to clean up their blog list, and trying to remove old, FTP published blogs will find a problem. We note that the dashboard utilities, in general, can still be accessed, using the navbar links - or the quick edit post links.

We have a Problem Rollup discussion, where we are requesting diagnostic details from victims of this problem.

1. Have you tried using the Classic or the New GUI - or both?
2. Does your Blogger account use a Blogger, Google, or Google+ profile?
3. What's your Blogger Profile URL?
4. Is the blog being deleted in existence, on the remote server?
5. Does the blog being deleted have current and valid DNS addresses, pointing to the contents?
6. What's the URL of the blog being deleted?
7. What browsers have you tried using? Do you get the bX-dm6o9e error from each browser?

If you are experiencing the bX-dm6o9e code, please answer the questions as best you can, to encourage Blogger Engineering to identify and correct the cause of the problem.

>> Top

Blogger Accounts, And Domains Based On Google Apps

We've know, for a while, of the downsides of having a Blogger account that's based on an email address that's provided by a Google Apps based domain. Some people are unknowingly using email that is based on Google Apps administered service - and they are not even the administrators.

A few would be blog owners - or members (of a private or team blog) - are using Google Apps administered domains for their email. This detail never becomes relevant to them, until they try to join or setup a Blogger blog.

When I click on the invite link, and try to set up a new Google account, I get the message.

Blogger has not been enabled by the administrator of the domain xxxxxxx.edu.

What do I do, now?

When you are a prospective blog member or owner, and you are using a domain that you control and own - and are able to access the Google Apps administrator account for the domain - you may be able to enable the Blogger service, for the domain. If you are merely one user of the domain, where your email service is hosted, the situation won't be that simple.

If someone else controls the email domain, where you need to use Blogger, you have 2 choices.

• Convince the domain administrators to enable the Blogger service, in their domain.
• Setup a web based email account, outside your current service.
  • Recover control of the blog, using the current email address.
  • Transfer control of the blog, to a new Blogger account.

Neither solution is ideal.

Not all domain administrators, even for those domains which use GMail services for non "gmail.com" email addresses, believe Blogger blogs to be an essential service. Some believe blog publication to be a frivolous or insecure activity, and will intentionally block use of Blogger in their domains - possibly mandated by a Corporate Security Policy. These administrators are unlikely to attend to your need with any amount of urgency.

Some educational institutions or corporations, which are now using GMail in their private domains, may also consider use of non domain, or web based, email as suspicious activity. This may also present a challenge to you, when you need to use Blogger.

You'll have to make a personal decision, when you are faced with an email account that does not permit Blogger accounts. Just understand the possible reasons why the choice is necessary.

>> Top