Market Your Blog, To Those Who Are Interested

We see many questions in Blogger Help Forum: Something Is Broken, about blog content, and (lack of) appreciation by the readers.

Occasionally, people become concerned about activity of the people reading their blogs - why they get so many new visitors (but nobody returns later, to read more), or why the main page is so well read (but nobody reads the archived posts).

In other cases, they wonder why the blog was deleted - even though it had the required warning protecting it. And sometimes, they may wonder why so many people read the blog, but nobody comments on the posts.

If your blog just uses Stats, to provide you reader activity statistics, you'll probably be only concerned with visitor activity, and pageview count.

If you use an actual visitor activity log, like SiteMeter or StatCounter, you may also look at new / return visitor ratio, or pages read / visitor count. In both cases, you're examining visitor interest.

Visitor interest starts with how you advertise the blog. You get good visitor interest when you advertise the blog where it will be welcomed, and in a style where your advertisements will be welcomed.

People who don't like your blog may read the first page, then go elsewhere. If they read more than the first page, they will probably be doing that so they can report the blog, for TOS Violation or similar. This is why some blogs are unrighteously clasified as abusive.

No matter how objectively you may write a blog discussing alternative lifestyles, if you advertise your blog where Bible Belt USA Conservatives may gather, the best result that you may see is "single pageview" visitors.

Occasionally, we'll see a problem report that starts out with a common complaint.

Why was my blog deleted? I don't spam.

When we're able to retrieve a cached copy of the blog, we'll agree with the owner.

Some blogs, deleted as abusive, will have a little known problem.

Commercially funded adult content.

Other times, the problem will be more subtle.

I set the "Adult Content?" flag to "Yes"! Why am I getting complaints? (Why was the blog deleted?).

The problem here starts with the nature of the "Adult Content" warning.

Not every blog owner realises that the warning is only advisory. Anybody, no matter their age or religious preference, may (by accident, or intentionally) click on "Agree". Having clicked, they may be subject to a faceful of content which is not in their best interest, or which they do not appreciate.

If a link to your blog appears in the wrong forum discussion, or on the wrong website - either a Bible Belt forum or School Children's website - don't be surprised if your blog continues to get content complaints. And in some cases, we'll see you in the forums.

Why was my blog deleted? I don't spam.

Be sensitive to both the stated, and unstated, policies where you post. If your blog contains controversial material, be very conservative about how and where you advertise. Publish properly targeted posts, with unique content, for the best future of your blog.

>> Top

Team Blogs, And Confusion About Blogs Locked After Detected Account Hacking

We've been discussing deleted blogs, resulting from Blogger accounts locked after suspicious account activity is detected, for some time.

Recently, we've seen a variant on the account lock / deleted blogs problem.

I made one of my friends an admin for my blog. When Blogger deleted His Blogger account and his blogs, they deleted my blog also.

Here, we see the possibility of detected hacking, affecting other members in a team blog ownership.

If someone sets up a blog, then invites his friends to be administrators, everybody on the team becomes equal owners. This can also happen when one person maintains two or more Blogger accounts - whether accidentally or intentionally.

That's the definition of a team blog - and it's one known problem with team blogs. This case shows us another problem with team blogs.

If somebody on the team has a Blogger account locked for detected hacking, all blogs owned by that account are taken offline, for security checking. Any blogs owned by that account are going to simply disappear from the dashboards of all owners - because all owners produce the same security risk, to any owned blogs.

When a Blogger account is locked, review of blogs owned by the account starts after the account is unlocked. If the team member with the locked Blogger account doesn't get the account unlocked, the blogs owned can't be reviewed.

Once again, we see why it's a good idea to only have active team members, as blog owners.

>> Top

Being A Hacking Victim Is Not Always The Fault Of The Account / Blog Owner

Even though being the victim of a hacking attack is not (always) the fault of the account / blog owner, the blog owner may have to bear some of the responsibility.

Since hacking detection is a fuzzy process, it's not always going to be detected immediately. The previous article discusses what happens when Google does detect a hacking attack - and in some cases reacts too diligently.

If Google is not able to detect an attack, in some cases, an attack may be successful.

With some blogs, that are not updated frequently, a hacker may take control, and successfully hijack a blog.

Occasionally we see another report

I just discovered that my blog contains spam - and I can't access the dashboard, to clean the blog!

This may well be a successfully hijacked blog, discovered too late.

Unfortunately, the latter report may also be another devious attempt to steal control of somebody's blog. Blogger Support cannot, reliably, support hacking recovery, on an individual basis.

From what I can tell, Blogger / Google is working on the larger picture - making the automated detection process more reliable. Given this concern, Blogger / Google won't be frequently available to diagnose and return control of individual hijacked blogs - even when the issue is righteous.

In general, blog owners have to support themselves, and learn how to protect themselves. This may be yet one more reason why 2-Step Verification is becoming less optional.

>> Top

Hacking Detection Is (Generally) Not The Fault Of The Blogger Account Owner

We've been helping Blogger blog owners deal with spurious fuzzy content classification, for many years.

We started out, long ago, with blogs deleted because of spam classification. Later, Blogger added malware classification - and most recently, porn classification ("adult content", with objectionable advertisements). These three classification categories involve fuzzy blog content analysis.

A fourth category, which similarly results in blog(s) being deleted, I describe as "hacking detection". This category complements the other three, because the primary symptom of all four are remarkably similar.

Help me! Blogger has deleted my blog!!

This is a frequent complaint, seen in Blogger Help Forum: Something Is Broken.

One problem with using the term "hacking" is that some account owners take this diagnosis personally.

Why do you mention hacking? I am not a hacker!

And in almost all cases, the owners are correct.

Blogs are deleted by Blogger, currently, because of several different reasons.

1. DMCA Violation.
2. Hacking detection.
3. Malware detection.
4. Porn detection.
5. Spam detection.

I list the different categories, collectively, because they are frequently reported, using the common symptom.

My blog was deleted, and I did not do it!

DMCA, malware, porn, and spam are generally based on what the blog owner did (though in many cases, what the owner "did" was simply to publish a blog). Hacking, on the other hand, is generally based on action by someone other than the blog owner.

DMCA, malware, porn, and spam classifications are based on content analysis (automated), or complaint (manual) - and these classifications can be somewhat avoided by the blog owner. Don't steal content or publish a blog containing malware, porn, or spam, to reduce your chance of having the blog classified.

Hacking detection, on the other hand, is based on analysis of Blogger account traffic - and this classification can not be avoided, as easily, by the blog owner. Hacking generally involves use of a cloud of computers, to systematically break into a Blogger account owned by the victim.

Though frequently, a hacking attack starts with unintentional disclosure of personal information by the victim, actual hacking activity is typically not initiated by the victim.

Detection of hacking attacks is best conducted by Google, because they can look for repetitive activity against multiple Blogger / Google accounts, from multiple computers located worldwide.

• Most account owners can login to their accounts in one or two tries.
• Very few account owners will, intentionally, attempt to login to their accounts, concurrently, from computers in Argentina, USA, and Zaire.
• Very few computers will be used to access Blogger accounts owned by people in Brazil today, in China tomorrow, and in Denmark next week.

Recovery from hacking detection requires willful action by the victim - though Blogger makes the required action so simple, its purpose becomes transparent. The victim, or account owner, is simply required to change the account password, solve a CAPTCHA, and / or verify account ownership by providing various personal details.

Having initiated hacking recovery, the account owner is able to login to Blogger - but is greeted by an empty dashboard.

You are not yet the owner of any blogs. Create a blog, and get started!

This is where the confusion starts.

Not all Blogger account owners personally publish a blog. Some people setup Blogger accounts simply to comment on, and / or Follow blogs published by other people - and won't, necessarily, publish a blog using the account in question.

Blogger accounts with no owned blogs may still be under attack by hackers - and are subject to hacking detection. This makes the primary symptom so confusing.

You are not yet the owner of any blogs. Create a blog, and get started!

People who don't own any blogs (under this Blogger account) may, or may not, see this as a problem.

In cases where the initial symptom is a deleted blog, the blog owner must recover the hacked (locked) account, before the blog can be recovered. This is one more scenario where unplanned, anonymous blog ownership, just causes more confusion.

Having initiated hacking recovery, a blog owner is simply expected to wait patiently, until the blogs owned by the account are verified as free of content added by the hacker. Unfortunately, we sometimes see the blog owner, impatiently reporting in Blogger Help Forum: Something Is Broken.

I had to change my password, and having done that, Blogger deleted my blog!

Sometimes, hacking detection starts with the Blogger account owner, repetitively trying to recover access to the account, by sequentially trying every possible password (sometimes trying the same password, repeatedly).

I know it's one of these! But which one? Did I maybe type the one, incorrectly??

This repetitive action looks the same as any malicious hacking attack - and that is why hacking detection is so hard to canonically diagnose.

Please, consider these details, the next time you post your problem report.

Help me! Blogger has deleted my blog!!

In some cases, I may respond with a mention of hacking detection. If I do that, please don't take my response as a personal attack upon you.

Why do you mention hacking? I am not a hacker!

Even though being the victim of a hacking attack is not the fault of the account / blog owner, that person may still have to bear some of the responsibility. In general, blog owners have to support themselves - learn how to protect themselves, and use 2-step verification.

>> Top

Blog Content, And Confusion About Blogs Locked After Detected Account Hacking

One Blogger mystery involves the varying periods of blog unavailability, after hacking activity is detected.

My blog just disappeared from my dashboard - and no, it's not listed under "Deleted blogs"!

When the owner mentions the notice about "suspicious" / "unusual" account activity, or having unlocked the account (by solving a CAPTCHA, receiving a phone message, changing the password) - and is advised to wait "24 to 48 hours" - many ask the obvious.

Is "24 to 48 hours" really accurate?

In reality, the legendary "24 to 48" hour time period is only a ball park figure - and both Blogger / Google, and the blog owner, contribute to the uncertainty.

The well known advice to "Wait 24 to 48 hours", after a Blogger account is locked for suspected hacking activity, is only an estimation of the waiting time, which the owner may have to endure. This is account / blog integrity verification.

There are several factors which can contribute to the accuracy of "24 to 48 hours" (which maybe should be stated as "one to two business days").

• Availability of essential Blogger / Google personnel.
• Current hacking activity level, and ongoing Blogger / Google workload.
• Blog content, which complicates hacking payload analysis.

We've referenced the first two factors (personnel, and hacking activity level) in the well known Blogger FAQ How long will it take?. The third involves detail which only the blog owner can provide. Many blog owners contribute to this uncertainty, in the development of their blogs.

There are several types of content, which hackers like to add, to blogs temporarily under their control.

1. Advertising - and similar shiny accessories.
2. Custom code - and various template tweaks.
3. Links to other blogs - and to websites outside Google address space.
4. Team memberships - and multiple blog owners.

All of these features, also added by the owner - and allowed (and encouraged) by Blogger - can require extra effort as a blog is validated, after detected hacking activity.

Blogger / Google security experts, in examining an account / blog, must look for features possibly added by the hacker. Security experts have no immediate knowledge what was added by the owner, long ago - as opposed to by a hacker, more recently.

Any advertising, custom code, external links, or team memberships, intentionally added by the owner, will contribute to time spent validating blog integrity.

• Leave a setting or tweak added by the hacker - and the blog remains a security risk, when returned to service.
• Remove a setting or tweak added by a blog owner - and the blog becomes broken, when returned to service.

Neither is desired, by the blog owners - nor by Blogger / Google.

More accessories and tweaks == more time spent by security experts == more time the blog remains offline, while the owner waits in uncertainty.

This uncertainty, added to delayed deletion caused by cache latency, leads to mystery.

All of this brings to mind the old adage.

KISS

Keep it simple, stupid.

>> Top

Empty Or New Blogs Can Be Classified As Possible Spam Hosts

We're seeing a few recent reports, in Blogger Help Forum: Something Is Broken, from owners of empty and / or new blogs, about spurious spam classification.

Very few owners of empty or new Blogger blogs understand why their blogs should be classified as possible spam hosts, by the Blogger anti-spam processes. Most blog owners seem to think that only blog content is considered, in spam classification.

Spam classification considers many characteristics of a Blogger blog, in classifying any blog as a possible spam host.

Blog content is an obvious - but not the only - factor in spam classification. Given previously observed behaviour of spammers, many characteristics of blogs, besides simply the extracted and analysed content, are used in classifying possible spam blogs. Using fuzzy spam classification techniques, one might also consider

• Overall behaviour in Google, by the owner.
• Past posting habits of the owner.
• Previous classification of similar blogs.

Some spammers are active in multiple Google activities and features. It's possible that some spammers even try to make their spam in Blogger harder to detect, by spreading their activity across other Google functions. Some spammers may not realise that spammy activity in other Google areas can be tracked, and included by Blogger spam classifications processes.

Blog owners who use one or more techniques involved in setting up and maintaining spam blog farms may be classified as spammers - and their blogs then classified as possible spam hosts. The term "blog owner" must itself be considered fuzzily, as some spam blog farms contain blogs owned by multiple Blogger accounts and profiles. Some Blogger accounts, similar to known spammer accounts - even with no blogs owned, or with empty blogs published - may then appear as possible spam hosts.

Empty blogs, that appear similar to blogs in known spam farms, may themselves appear as possible spam hosts. Various details such as blog name, blog design, and use of various blog accessories and features, can make a blog appear similar to known spam blogs - with no other content.

Given the need for Google to reduce the volume of spam blogs, fuzzy spam classification might use any of the above details, in classifying any empty or new blog as a possible spam blog. This will, unfortunately, lead to spurious spam blog detection. Given the ability of spammers to publish multiple blogs in the Blogger name space, classifying empty and new blogs is necessary, in making it possible for Google to keep up with spammy activity.

>> Top

The Mysterious "Deleted blogs" Dashboard Link

Occasionally, we see signs of confusion, in Blogger Help Forum: Something Is Broken.

Where is the "Deleted blogs" link?

or

How can I recover my blog, if there's no link on the dashboard??

These blog owners don't understand that "Deleted blogs" only appears, when there are deleted blogs that can be recovered.

Not all blogs, having vanishing from the dashboard, will be recoverable by the owner.

• A blog deleted / locked after hacking activity was detected won't be recoverable.
• A blog owned under another Blogger account won't be recoverable.
• A blog that does not exist won't be recoverable.

If the Blogger account owns no blogs that are recoverable, there won't be a "Deleted blogs" link on the dashboard.

If the Blogger account owns other blogs, that are not currently deleted, those blogs will be listed. If the Blogger account owns no recoverable blogs, the blog owner sees a monolithic message

You are not an author on any blogs.

In some cases, the blog owner will be advised to clear cache, cookie, and sessions - then restart the browser, and login to Blogger. In other cases, the solution will be to wait 24 to 48 hours, and check again. Just don't waste time looking for a link that may not be there - and try to understand why the link may not be there.

>> Top

Browser Cache, And Confusion About Blogs Locked After Suspected Account Hacking

The effects of browser cache, upon our Internet life, are not always understood.

Most of us know, by now, to clear cache and restart the browser, after updating a blog, for consistent testing. Some folks know that blog security changes don't always take complete and immediate effect.

Recently, we're seeing a new effect, reported by owners of Blogger accounts locked, after hacking activity is detected.

I got a message mentioning suspicious account activity, when I logged in to Blogger. I provided my phone number, and I received a code on my phone, that I had to enter before I could then log in. My blog was working fine just after I logged in. A short while later, though, it was gone. Why was my blog deleted, because I unlocked my account?

This blog owner is just slightly confused, about the cause and effect here.

Google robotic processes are constantly monitoring account login activity, and watching for signs of hacking activity, such as brute force password entry.

When hacking is detected, the detection may not be immediate - so Google protects us by considering the possibility that the hacking could have been successful, and deletes or locks blogs owned by the account under attack. The blogs in question are taken offline, immediately, when hacking is detected.

If a blog owner has just been working on a blog, as is frequently the case, the blog contents will be cached somewhere between the owner and the Blogger servers. Blogger can take the blogs offline, on their servers - but any cache containing the blogs will remain. If the blog owner is working on a blog while the Blogger account is under attack, what's in cache will remain, visible to the owner, until cache expires.

If a Blogger account is attacked, and the attack is detected, shortly after the owner has viewed a blog, what's in cache will be used, until it expires. The owner won't see the effects of the blog being deleted until the cache expires, and the browser tries to retrieve a fresh copy from the Blogger servers.

The blog owner sees the blog go offline shortly after he verifies account ownership, and thinks that the verification process caused the blog to go offline. In reality, the blog was taken offline before the owner even knew of "suspicious" account activity.

Now, the blog owner can do nothing, except wait until the account and the blogs are examined for signs of tampering. In some cases, no notification of progress will be received - and the owner will see the blog(s) returned to service, sometime later.

How much later the blogs return to service will vary widely, depending upon several details - and this variation, added to the uncertainty caused by cache latency, leads to mystery.

>> Top

Deleted / Locked Blogs Have Several Causes, And Various Resolutions

Many blog owners are occasionally confused, by the effects of several Blogger / Google security processes, when they are simply trying to login to Blogger and work on their blogs. We see the agony, daily, in Blogger Help Forum: Something Is Broken.

The side effects of the security processes are similar - and depending upon various owner specific details, can be easily confused for each other. The possibility of confusion requires careful initial analysis, when we are faced with an angry blog owner.

My blog was deleted, by Blogger. How could they do this? I do not publish spam!

This is a typical problem report, which can reflect any one of the processes, each requiring different action in the forums.

There are various Blogger / Google security / TOS enforcement processes, each of which will cause a Blogger account and / or blog to be unavailable for full access, at any time.

• DMCA Violation looks for copyright and similar violations.
• Hacking detection looks for automated attacks against our Blogger accounts and blogs.
• Malware detection looks for malicious code installed in our Blogger blogs.
• Porn classification looks for blogs with adult content, and with unacceptable advertisements (aka monetised porn).
• Spam blog classification looks for Blogger blogs which contain spammy material or use spammy techniques.
• Repeated offenses can have gradually increasing severity of action taken.
• Owner deletion or rename may be confused with spam classification.
• Team blog ownership will affect blogs owned in common, by that team.

Each different process has a different effect on the Blogger account and blogs owned - and requires different attention by the blog owners, by the forum helpers, and by Blogger Support and Google Security.

DMCA Violation

Accounts and blogs can be deleted, for progressive DMCA violations.

The DMCA violation process originated with complaints made by the major entertainment industry content enforcement organisations, citing theft of "intellectual property" which they control. In the USA, this would involve the "MPAA" (Motion Picture Association of America), and the "RIAA" (Recording Industry Association of America). I have been told that similar content enforcement organisations exist in other countries.

In more recent events, private citizens have been known to use the DMCA Violation complaint process, for miscellaneous copyright violation reporting.

DMCA Violations have a formal complaint and appeal process.

Hacking detection

Blogger / Google network monitors are constantly analysing account login activity, and looking for signs of brute force password hacking. When hacking activity is discovered, the Blogger account - and all blogs owned by the account - are deleted and locked, pending account verification by the owner, and blog integrity checking by Google Security.

The blog owner, after changing the account password, solving a CAPTCHA, and / or verifying account ownership by providing various personal details, is left waiting for the blogs owned by the account to be examined for signs of abuse by the hacker. Until the blog(s) are returned to online status, they appear in neither the "Deleted blogs" or "Locked blogs" dashboard lists. The owner, even when logged in to the right Blogger account, simply sees the dashboard advice

You are not an author on any blogs.

In this case, neither the blog owner nor the forum helpers can do anything useful, except wait, anxiously - possibly, with no notice provided. The blog being offline may not be immediately observed by the owner - and this may cause more confusion.

Malware detection

Blogger robotic processes are constantly checking the various blogs, looking for malicious blog accessories, components, and scripts. When a blog is subject to "Malware" classification, the blog will appear in one of two dashboard lists, in sequence.

1. Initially, the blog will appear in the "Deleted blogs" list. While the blog is in "Deleted" status, the blog owner will be able to do nothing, except request "Restore".
2. Once the owner has requested "Restore", the blog is undeleted, and placed into the "Locked blogs" list. While the blog is in "Locked" status, all authors can access the blog to remove malware - but the blog remains offline, to all viewers. Once all malware has been removed from the blog, the owner can "Request Unlock Review".

If the blog remains in "Locked" status for over 48 hours, the blog owner may report this in the forums, and may request a manual review. The forum helpers, and online viewers, will generally see the blog displayed as "TOS violation".

This blog is in violation of Blogger Terms of Service and is open to authors only

Adult Content / Porn Detection

Blogger will soon classify and delete blogs with "adult content", which host advertisements to commercial porn sites. Like spam classification, this will probably involve both false negatives and false positives.

Spam detection

Blogger robotic processes are constantly checking the various blogs, looking for signs of spam activity and content. When a blog is subject to "Spam" classification, the blog will be displayed in the "Deleted blogs" dashboard list. The owner can do nothing, except request "Restore".

If the blog remains in "Deleted" status for over 48 hours, the blog owner may report this in the forums, and may request a manual review. The forum helpers, and online viewers, will generally see the blog displayed as "Removed".

Blog has been removed
Sorry, the blog at xxxxxxx.blogspot.com has been removed. This address is not available for new blogs.

Repeated Offenses

We have recently noted that repeated TOS Violations, involving DMCA, Malware, Porn, and Spam, are being dealt with in increasing severity.

Owner deletion or rename

Mistakes made by the owner can be confused with Spam detection. When a blog is deleted by the owner, it will appear in the dashboard "Deleted blogs" list for up to 90 days. During the 90 days, the owner (or a team member, when applicable) may "Restore" the blog. After the 90 days expire, the blog will be removed from "Deleted blogs", and will be unrecoverable. Besides being unrecoverable, no other details have been determined.

If the blog is renamed (published under a different BlogSpot URL), the external symptom may be similar to deletion by the owner.

Blog has been removed

Sorry, the blog at myblog.blogspot.com has been removed. This address is not available for new blogs.

In this case, the blog will be listed in the dashboard "My blogs" list, under the right Title. The owner needs to setup a stub blog, pointing the readers to the new URL.

Team Ownership

Any blogs owned by a deleted / locked Blogger account may simply disappear from the dashboards of other team members. If the Blogger account is not restored / unlocked, the blogs owned by that account - including any team owned blogs - may remain deleted - and inaccessible to everybody.

The Confusion Accumulates

Because of anonymous blog ownership, loss of account control, team blog ownership, and use of inactive or non existent email addresses, any account / blog which is deleted or locked for hacking (actively / as a victim), malware, and / or spam may not be easily discovered or recovered by the owner. These issues cause further confusion and frustration.

These scenarios may appear, to the untrained eye, to be signs of fraudulent, malicious, and / or petty actions by Blogger - and are loudly claimed so by spammers with their own agenda. None of these accusations are true - the above processes simply represent Blogger and Google attempting, in the best possible way, to protect everybody against the various hacking, malware, porn, and spam attacks which are constantly in progress.

>> Top

A Blog Deleted, As A Suspected Spam Host, Is Not Subject To The 90 Day Limit For Restore

We see signs of panic, periodically, in Blogger Help Forum: Something Is Broken, about blogs deleted as suspected spam hosts.

My blog was deleted for spam 2 months ago. I need my blog restored, this month, as I don't want to lose it!

This is a common misconception, about spam deletions, and the mysterious 90 day limit.

There's no deadline for either the start, or the completion, of the review process, when a blog is classified as a suspected spam host. The owner may request review a year after the blog is deleted - if he's willing to wait for a year without concern. Alternately, he may ask for review the same day that he discovers the blog is offline. When the review is requested, Blogger Support may be immediately available, and may return a blog to service that same day - or they may be busy, and require a month to respond.

When the blog does get reviewed, the rules are simple.

• If the blog is judged to be righteously classified, the blog is deleted, with the URL locked to the deleted blog.
• If the blog is judged to be spuriously classified, the blog is restored, and control is returned to the owner.

In either case, the URL is not made available to the public.

This is either good news (if you are the owner), or bad news (if you wish that you were the owner).

You cannot gain control of the blog, or of the URL, by reporting the blog as a spam host - whether the blog has 1 post (one post published 10 years ago), or 3650 posts (one post published daily, for 10 years). If the blog appears to be inactive, your only option is to contact the owner, directly. If Blogger classifies an inactive blog, following your reporting the blog as a spam host, the blog will remain deleted or locked, until the owner requests review.

If the owner deletes the blog, the URL may - or may not - be made available.

Pick an available URL, and start your blog - and concentrate on the interests of your readers.

>> Top

Confusion Over Recovery From Locked Blogger / Google Accounts

Not all blog owners understand the reasons behind the locked Blogger / Google accounts.

Even less understand why recovery of locked accounts, and of the blogs owned by the locked accounts, is not immediate. We see the occasional report, in Blogger Help Forum: Something Is Broken.

I had to change the password on my account - and now my blogs are deleted! Why should I wait another "24 to 48 hours" to get my blogs back?

This blog owner does not understand the possible reasons for the locked account - and the work that goes on after the account is unlocked.

Brute force hacking of our Blogger / Google accounts, by hackers / spammers, who have use of the various botnets in the Internet, is a constant activity. Opposing activity, by the Security teams in Blogger / Google, to not let hackers and spammers take control of our accounts and blogs, is just as constant.

Some of the Security activity requires our patience - and blog owners, having to recover their deleted blogs, are not always patient.

The Security processes, in Blogger / Google hacking prevention, have to work from a worst case scenario, when detecting hacking activity.

Account hacking cannot always be detected instantly. When hacking is detected, the hacking prevention process has to consider the possibility that the accounts under attack have already been compromised.

When Blogger / Google Security detects possible brute force hacking against an account, they lock the account - and delete the blogs owned by the account. Alternatively, they quarantine the computers used in the hacking activity. This is where we see the notice of "suspicious account activity" - and possibly the dreaded "403 Forbidden".

When we discover a locked account, and request its restore, the security process looks for signs of security weaknesses allowed by the account owners - or possibly added by the (temporarily) successful hacker. In some cases, the owner may be required to change the account password, and receive instruction on using a more secure ("strong") password.

Ongoing efforts by Blogger / Google, to make the account recovery easier for the blog owners to endure, may cause mystery about blogs missing from the dashboard, without obvious recovery options.

After the Blogger / Google account is restored, the integrity of the blogs owned by the account must be verified.

• The blog content must be examined for spammy content added.
• The blog Permissions list must be checked, for backdoor accounts added.
• The Mail-to-Blogger settings must be considered as a possible backdoor.

These are simply examples of what must be done, to ensure that our blogs were not compromised, even temporarily, by the hacking just detected. After you get your account back, it's not a bad idea for you to verify this, on your own. If you just got your blog back, after resetting your Blogger account password and / or verifying your phone number, check your template carefully, looking for references to unfamiliar JavaScript code, hosted outside Google address space.

The process of account and blog integrity verification will require an unpredictable time period - and needs to be done with the blogs inaccessible to anybody but the Blogger / Google security processes. The blog being offline may not be immediately observed by the owner - and this may cause more confusion.

Blogger Support is aware that nobody wants to deal with the stress of having a locked or deleted blog - especially after they have gone through the process of verifying their account. They are also well aware of the frustration that is present when someone reports

Somebody is publishing spam on my blog - and I can't access the dashboard to remove the spam!

Locking the owned blogs, after hacking activity is detected, complements the ongoing policy of not disclosing the account names, in helping to keep our blogs under our control.
>> Top

Everybody Won't Get Proper Notification When Their Blog Is Deleted Or Locked

One problem that we're seeing in Blogger Help Forum: Something Is Broken involves blog owners, who recently discovered their blogs deleted or locked, by Blogger - and without any notice received.

The account actions may be required with the blog deleted for a suspected TOS Violation, such as hosting malware, porn, or spam - or locked because of "suspicious activity" on the Blogger account.

Why was my blog deleted? I never got proper notice!

Too many people depend upon email notification - and may not receive proper notification, in all cases.

Blogger provides a dashboard based malware / porn / spam classification notification / recovery process, which may not be available for everybody. Similar to malware / porn / spam classification, there will be issues with DMCA violation notification.

This is also a problem when accounts are locked for "suspicious activity", and when blogs are locked for hosting malicious third party gadgets.

There are several reasons why some blog owners won't get notification of their blogs being deleted or locked, by the various Blogger / Google security processes. Besides notification limitations, nobody should expect to get advance warning of action being taken - as this would simply encourage the intentional spammers to never request review.

Intentional spammers, if permitted, would play 3 Card Monte, endlessly, with their spammy blogs. Both the notification, and advance warning, limitations contribute to confusion about the various Blogger / Google security recovery options.

All email based notifications may not be properly delivered. The owner of any email account, which may not deliver email properly, is still responsible for reading any important email messages.

Too many Blogger blogs are owned by Blogger accounts which are based on inactive or nonexistent email addresses. Owners of these blogs will never see email notification, when they - intentionally or not - make themselves anonymous.

In other cases, some people may get the email notifying them of problems - but their email program may misfile the email, in a folder which they may not check, regularly. In some odd cases, somebody other than the owner may get the email.

In team blog ownerships, any blog owned by the team is subject to action against any team member accounts. Blogs affected will simply disappear from the dashboards of all team members - with no opportunity provided for appeal or review.

Finally, too many blog owners maintain multiple Blogger / Google accounts, and are not completely sure which Blogger account may own a given blog. These owners may not even see the dashboard based "Deleted Blogs" button / link, because they will be logged in to the wrong Blogger account.

Not all of the above scenarios are entirely the fault of the blog owners - but the blog owners are the ones who will have to make the effort to resolve the resulting problems.

>> Top

Benefits Of The New Dashboard Based Spam Review Request Option

The improved spam review option has been available, on our dashboards, for slightly less than 2 months. For all it's usefulness, it appears that some blog owners see the new option as just another bit of red tape, which prevents them from publishing their blog. We see suggestions in Blogger Help Forum: Something Is Broken, periodically.

Can't you just submit my review request now, without making me wait another 2 days? Is my dashboard review request really necessary?

Unfortunately, the better the dashboard based spam review option works, the more this confusion should be expected.

Long ago, we had a "Deleted Blogs" link on the previous Blogger dashboard. That link, and the hidden list, were obscure - and explaining how to find the "Deleted Blogs" list was not a job for the weak or impatient. When a blog owner would post in the forums

Why was my blog deleted? I am not a spammer!!

we would typically reply, immediately, with the notorious Spam Appeal Guidelines - then later, cooperative blog owners would see

Your appeal is forwarded to Blogger Support ...

In order to speed up recovery of the less spammy blogs - and shorten the restore wait time for all deleted blogs, Blogger Engineering added the dashboard based "Restore" button. The new button serves two functions.

1. For blogs deleted by Blogger, that are marginally spammy, the blog owner can request an expedited review.
2. For blogs deleted by the owner, less than 90 days previously, the owner can easily restore his own blogs, as convenient.

The new button serves several groups of people, in various ways.

1. Owners of less spammy blogs benefit by expedited restore. When successful, they see their blogs possibly restored on that same day, without their spending any time in the forums.
2. Owners of marginally spammy blogs benefit by regular review and restore, from a shortened queue - since some blog owners will use the expedited queue.
3. Blogger Support can spend less time with the marginally spammy queue, and produce quicker turnaround - yet spend more time examining the truly spammy blogs.
4. Only the genuine spammers will not benefit from the new review queue.

This produces a Win - Win - Win - Loss (sorry, Spammie) scenario.

The blog owners who get their blogs back in a few hours probably won't post in the forums, and praise the improvement - they will be busy re publishing their newly recovered blogs. We may see more oblivious spammers, because Blogger Support will able to spend more time examining truly spammy blogs - which should encourage Blogger Engineering to tweak the automated spam classifier, into digging deeper into the Blogger Blogosphere. So we should expect to see more posts in the forums, for a while.

Why was my blog deleted? I am not a spammer!!

And, it's possible that not all deleted blogs will be listed by the "Deleted Blogs" wizard.

>> Top

Anonymity, Your BirthDate, And Your New Blogger / Google Account

Not all new Blogger blog owners understand why they are asked for their birthdate, when they setup a Blogger or Google account. Some folks see this as a violation of their right to privacy, and enter a fake birthdate. Some real serious privacy enthusiasts might enter "01/01/01", just to get through the setup process - maybe intending to correct it, later.

Nobody entering "01/01/01", for one's birthdate, suspects that claiming such a birthdate makes them - in 2013 - appear to be 12 years of age. Unfortunately, 12 years is below the minimum age for owning a Blogger blog. Since Blogger / Google tries to protect the young people on the Internet from inadvertently exposing themselves - or their families or friends - to unknown dangers, people who may appear to be of insufficient age are subject to having their Blogger / Google accounts, and Blogger blogs, deleted or locked.

If you entered a fake birthdate some time ago, and now find your account or blog locked or deleted, you need to prove your age to Google - and you should do this promptly. The Google Accounts document Frequently Asked Questions about Google Account and Age Requirements explains how you do this. The process of verifying your age / birthdate is not convenient - and some privacy enthusiasts may claim that it too violates their privacy rights - but it is necessary, to let you correct your birthdate - when you are legitimately of legal age.

Now, you have to hope that you did not, intentionally or mistakenly, also provide a bogus email account as your Blogger / Google account name / recovery email address. The process of identifying yourself as the owner (former, nominally underage) of a given Blogger / Google account is easier to do, when you have access to the email account stated as the account recovery email address.

>> Top

Improved Spam Review / Undelete Option In Blogger

One of the more positive changes in the "New GUI" involves an improved ability to find, and correct, deleted and locked blogs.

Finding deleted / locked blogs, under earlier versions of Blogger, was always a challenge - both for the person looking for the necessary display - and for the people trying to instruct how to find the necessary dashboard display.

In the current Blogger dashboard, one simply logs in and looks for the "Deleted Blogs" button - right beneath "New Blog", when the blog owner has any self deleted blogs, or any blogs deleted or locked by the Blogger abusive blogs classifier. Clicking on "Deleted Blogs", we see a list of blogs - with either an "Un delete" button (for self deleted blogs), or a "Restore" button (for spam classifier locked / deleted blogs).

Neither the "Restore" or "Undelete" button produce an immediate or universal result - both are still subject to previous limitations.

• The "Restore" button leads to the "Review Request" dialogue - and to the actual spam review - still subject to the opinion of Blogger / Google spam experts.
• The effect of the "Un delete" button is limited to blogs which can be un deleted.

It is simply now far easier to find the spam review / un delete mechanism, than it was under the previous GUI.

If your blog was deleted by you - or deleted by Blogger for hosting malware, you should be able to hit "Restore", and the blog will be restored while you wait. If the blog was deleted or locked by Blogger for suspected spam hosting, you will probably have to solve a CAPTCHA - then wait 24 to 48 hours, while the blog is reviewed. In the long run, you will probably find this extra effort will be worth your time.

In some cases, the owning Blogger account may be locked, following unusual account activity - generally, brute force password guessing attempts, in an effort to hijack control of the account and any owned blogs. After submitting an account restore request and / or changing the account password, the blogs owned by the account will be restored - generally 24 to 48 hours after the account is restored. This is a normal, and unavoidable, result of Google, protecting your account and blogs from hacking activity.

Just be aware that not all blogs will be listed by the "Deleted Blogs" wizard.

Please be aware of the limitations of the restore process. This process serves blog owners who have been spuriously classified. If you request restore - and Blogger confirms that you are a spammer - you will be best advised to start over, or to find a different platform for publishing.

If you do start over, you should be very careful, and avoid making the same mistakes - lest you be subject to more strict punishment. Spammers simply are not welcome, in Blogger / Google - sorry.

>> Top

Blog Owners Seeing bX-afpmyd When Trying To Un Delete Custom Domain Published Blogs

We're seeing a few reports this week, from blog owners who recently deleted their custom domain published blogs - who now lament their decision - and who are unable to un delete the blogs.

I can't "undelete" my blog, that used to be published as a custom domain URL. I received the following error code: bX-afpmyd.

This problem, like others, appears to have started when custom domain publishing was restored, last week.

Blogs deleted when a custom domain URL is in use have always been a challenge. Similar to the abandoned custom domains problem, they have resulted in yet another cause for the well known custom domain problem

Another blog ....

Now that Blogger is requiring verification of domain ownership, by adding ownership certification using a new "CNAME", it's likely that either lack of the new "CNAME", or broken blog / domain pointers, are going to be a problem when un deleting blogs formerly published to custom domains.

If you are unable to un delete your previously deleted custom domain published blog - and you are otherwise able to restore the blog in question - you, like other blog owners trying to make changes to their custom domain published blog, will need to use the Publishing wizard, and the "settings instructions", and add a unique domain ownership certificate to your non BlogSpot domain. Then, if able to un delete the blog, you'll need to re publish the blog to the domain.

>> Top

If Your Blog Was Deleted, It's Good To Know Why

Of the many problem reports that we see in Blogger Help Forum: Something Is Broken, possibly the most ambiguous might be

My blog was deleted. How do I get my blog back?

The confusion, evidenced here, is normal - but overlooking the reason for the deletion can waste time - and delay or prevent getting the blog restored.

Any time someone reports a deleted blog, it's good to understand - and possibly verify - the cause of the deletion.

1. Was the blog deleted by the owner?
2. Was the blog deleted by Blogger - as a suspected abusive content host?
3. Was the blog deleted - because the owning Blogger account was locked by Blogger / Google?

Each of these possibilities can have different consequences - different recovery protocols - and different prognoses. To avoid wasting time - and affect the options for recovery - it's good to triage the diagnosis.

A blog deleted by the owner must be recovered by the owner. If the blog was deleted because the owning Blogger account was deleted, the owning account has to be restored, to start. And the time limit, for restoring a blog, deleted by the owner, is limited.

A blog deleted by Blogger, as a suspected abusive content (malware, porn, spam) host, must be reviewed and restored by Blogger. The good news here is that the review and restore process has, theoretically, no time limit for either initiation or completion.

A blog deleted by Blogger because of a deleted or locked Blogger account, likewise, has no time limit. However, there are two possibilities here.

1. If the Blogger account was locked for "suspicious activity", the account must be unlocked, following owner request - then the owner must wait, patiently, for the blog(s) to be verified and restored to service.
2. If the account was deleted, because of ownership of other blogs suspected as spam hosts, all blogs suspected must be reviewed.

Here, having the Blogger account associated with an active email account is a necessity, for finding the warning notices from Blogger, and deducing which cause contributed to the deletion. And, we see yet another reason for limiting your use of multiple email / GMail accounts.

Bearing in mind the limited time window for getting an owner deleted blog restored, it's a good idea to first identify all owner initiated deletions. If we wait for Blogger to review the blog, as a suspected spam host, and they respond with

The blog was trashed by the owner.

this won't help the owner when he realises

Oh yeah, I may have deleted it - last year (and over 90 days ago!).

>> Top

Having A Blogger Blog Removed Or Restored, After Death Of The Blog Owner - The Next Chapter

The question of disposition of blogs, left behind by deceased blog owners, comes up in Blogger Help Forum: How Do I?, from time to time.

As Blogger blogs - and similar Google products - become mature, and as more people who publish Blogger blogs become susceptible to old age and death, this problem will become more critical. As recently as 2010, in order to assume control (or request deletion) of such a blog, Blogger required only a faxed copy of the death certificate.

We are now seeing that the death certificate is only one part of a formal procedure, which Blogger / Google now uses, in the dual role of

• Compassion, in allowing a friend or loved one to appropriately assume control of blogs left behind.
• Due Diligence, in preventing fraudulent claims by people who have no legal or moral right to assume control of blogs.

Both roles are righteous, and are needed to help Google reduce hijacking of active Blogger blogs.

As part of an improved procedure for disposition of Blogger blogs left behind by deceased owners, Blogger now uses GMail Help: Accessing a deceased person's mail as guidelines. The new guidelines

1. Use a two part process - a preliminary review, followed by a formal court documented process.
2. Include a dedicated facsimile transmission / postal mail address.
3. Include additional requirements, which formally identify the relationship of the person requesting control of the blog in question, to the deceased.

The preliminary review specifies a facsimile transmission / postal mail address:

Google Inc.
Gmail User Support - Decedents’ Accounts
c/o Google Custodian of Records
1600 Amphitheatre Parkway
Mountain View, CA 94043
Fax: 650-644-0358

and a formal list of material required, for Part 1 - preliminary review.

1. Your full name.
2. Your physical mailing address.
3. Your email address.
4. A photocopy of your government-issued ID or driver’s license.
5. The Gmail address of the deceased user.
6. The death certificate of the deceased user. If the document is not in English, please provide a certified English translation prepared by a competent translator and notarized.
7. The following information from an email message that you have received at your email address, from the Gmail address in question:
   • The full header from the email message. See instructions on how to find headers in Gmail and other webmail email providers. Copy everything from 'Delivered-To:' through the 'References:' line
   • The entire content of the message

When specified by Blogger Support, we were instructed to substitute the blog URL, for the Gmail address (as #5). No addendum referencing the email message (as #7) was provided.

The instructions for Part 2 are not as well defined, as for Part 1.

Part 2 will require you to get additional legal process including an order from a U.S. court and/or submitting additional materials. Please note that submitting these materials will not guarantee that we will be able to provide Gmail content so we recommend not embarking on Part 2 until you hear back from us regarding Part 1.

These requirements may seem onerous to the less observant. Actually, by formalising the process, this should reduce the number of fraudulent claims, and make it easier for Google personnel to legitimately process claims, while exercising both compassion and due diligence.

>> Top