Reverting Your Blog Back To Blogger Comments, From Google+ Comments

We're starting to see regular evidence of dissatisfaction, in Blogger Help Forum: Something Is Broken, about Google+ based Blogger commenting.

We've known about some undesirable features of Google+ commenting, for a while now.

• No ability to moderate comments, made against your blog, before they are published.
• No ability to moderate comments, from the dashboard.
• No controls for moderation, or for notification, of comments.
• No ability to view all comments, made against your blog.
• No ability to block all undesirable comments, made by people who don't like your blog.

These are just the undesirable features which directly affect commenting.

Not every blog owner realises that anybody in Google+, able to view their blog, can make comments about their blog. Unfortunately, just as you can't see the posts made in Google+, by people not in your circles, neither can you see comments made by people not in your circles - even if their comments are published against your blog.

Deciding that Google+ comments may not be their cup of tea, some blog owners decide to revert to Blogger native commenting, and recover normal commenting features.

Reverting the blog, to use Blogger based comments, is simple enough - in most cases. From the dashboard Google+ menu entry, look for the selection "Use Google+ Comments on this blog". Un checking that selection, your blog is back to native Blogger comments. To verify success, you may need to clear browser cache, and restart the browser.

Some blog owners think that deleting their Google+ profile, or simply reverting their Blogger account, will immediately recover control of commenting. Having deleted / reverted the Google+ profile, however, the Google+ dashboard menu entry disappears - but the blog continues with Google+ based comments, and with no dashboard selection to "Use Google+ Comments on this blog".

For any blog owned by a Blogger account with a newly deleted (reverted) Google+ profile, the blog owner must now again upgrade the Blogger / Google profile to Google+, and create a new Google+ profile. With the Blogger account again using a Google+ profile, the dashboard Google+ entry, with the necessary "Use Google+ Comments on this blog" option, will be restored - and Google+ comments can be disabled.

If you decide that Google+ based comments don't suit your Blogger blog, you can recover normal Blogger comments - but please recover carefully. Always uncheck the dashboard option to "Use Google+ Comments on this blog", before doing anything else.

>> Top

Deleted Comments Cannot Be Recovered

Blogger blog owners, who are accustomed to recovering deleted files on a personal computer, will find Blogger Comments to lack useful protection.

If you accidentally delete a file on your personal computer, no worry - just look in the Trash Can, find the file in question, and recover the file. Just do this before you empty the Trash Can.

Comments, published on our blogs, cannot be recovered once deleted.

I deleted a comment - but now realise that I acted in haste. How do I recover the comment that I deleted?

To this person, there is no useful answer.

Whether you moderate comments before or after they are published - and whether you moderate using the dashboard Comments wizard, or your email Inbox - once you click on "Delete" (and possibly hit "Yes"), the comments in question are gone. There is no Trash Can for deleted comments.

Some blog owners will retrieve the deleted content (possibly, from email), and manually re publish the content, when possible. Unfortunately, that will produce a comment with (possibly) the deleted text - but no link to the originator of the comment deleted. If the text content of the comment is the relevant detail to you, as the blog owner, you may do this - but the republished comment won't be the same.

Delete comments with care. Once you delete a comment, you won't get it back.

>> Top

If You Comment On Blogs Extensively, You Should Consider Using Google 2-Step Verification

One recently identified cause of deleted Blogger blogs appears to involve brute force hacking against our Blogger / Google accounts.

We've known, for some time, about blog owners receiving alerts about "suspicious" / "unusual" account activity. The alerts frequently involve locked or deleted Blogger / Google accounts - and generally include the owner having to change their password, solve a CAPTCHA, and / or provide their phone number (mobile or home phone) to login.

Later, people started reporting that their blogs were being deleted - possibly as a result of having to change their password, solve a CAPTCHA, and / or provide their phone number.

I've been observing - and blocking - an annoying style of comment based spam, which I have termed "nice blog" spam, for some time.

Nice blog. I will keep visiting this blog very often.

This style of spam, from what I can tell, has been published by the millions, in various blog comments, on both Blogger and non Blogger platforms.

The reason for the spam always intrigued me. Observing that the spam was published in the millions, suggested to me that it had a special purpose, intended by its creators. Looking at a typical spam message, in my email (since I moderate before publishing), I could see no consistent type of content.

• Some messages would contain links, others not.
• Some messages would mention what looked like commercial products, other references were obviously imaginary targets.
• Some messages would appear to be mere babble.

Recently, I discovered one strong possibility for the purpose of the spam - a very ingenious form of email address mining. The spam comment is only needed to allow a hacker to subscribe to a given comment stream, using the "Email follow-up comments to ..." option. It's possible that the subscription is not even affected by moderation - whether the blog owner is moderating, either before or after the comment is published to the blog, the hacker remains subscribed to the comment stream.

All that the hacker / spammer has to do is to publish a spam comment, select the "Email follow-up comments to ..." option, and watch while his Inbox fills up with subsequent comments from other Blogger / Google / OpenID account owners. Any comment containing an email address, and linking to a Blogger blog, would go straight into the hackers database.

Later, the hacker could go to work against the Blogger accounts referenced in the comments. In some cases, this would result in successfully hijacked Blogger blogs, which would become part of a spammers blog farm where advertisements of various nature could be hosted. Valuable blogs, with established reader populations, could also be used to serve malware (and more hacking) to unsuspecting readers.

The demographics of some hijacking attacks provide interesting clues. In one episode, we had a significant number of home / personal / small business blogs that had been hijacked by one specific individual. Many of the victim blogs

• Contained details relevant to the owners, which provided clues to passwords used by the owners.
• Were owned by people who used commenting extensively, for networking both with friends, and with business targets.
• Were read (and commented upon) by similar people, who similarly provided password clues in their own blogs.

Having been part of the restore process, both with people who had their blogs hijacked, and who had their accounts locked and blogs deleted, I observed that the former (hijacked blogs) seem to have decreased in volume as the latter (accounts and blogs locked / deleted) increased in volume. I don't think that the relationship is coincidental - or spurious.

My opinion is that the locking of Blogger / Google accounts - and subsequent deletion of blogs - directly results from detected attacks against the accounts in question ("suspicious" / "unusual" activity). Noting that the attacks seem to be more common to people who comment on blogs as a form of networking, it appears that commenting can lead to accounts and blogs being locked or deleted, as Google protects us against hacking.

Considering this possible cause and effect relationship, Google 2-step verification is a good idea. Click here, for Google instructions on setting up 2-step verification.

Use of 2-step verification helps safeguard our accounts against brute force hacking. This will help anybody who is anxious about accounts and blogs being deleted or locked, as a result of "suspicious" / "unusual" activity. If you own a blog which is subject to this threat, you should consider using 2-step verification.

The sanity (heart attack, ulcer) that is saved may be your own.

>> Top

Comment Moderation Provides Limited Movement Between Queues

Not every blog owner understands the limited ability to moderate comments - and to correct a moderation decision, previously made in mistake.

We see occasional evidence of confusion in Blogger Help Forum: Something Is Broken.

I deleted a comment by mistake. How do I get the deleted comment back?

and

I marked a comment as "Not Spam" - but now it's not in "Awaiting moderation"!

The ability to move comments, in the moderation queues, is limited - and it's asymmetrical.

There are 3 queues, which are visible from the dashboard Comments wizard.

1. Published.
2. Awaiting moderation.
3. Spam.

Besides the 3 queues, there is a fourth possible state - Oblivion, which is not visible, and from which comments cannot be moved. Some blog owners may confuse Oblivion with a desktop computer standard - "Trash Can". This confusion can cause problems.

1. The contents of "Trash Can" can be viewed. Comments in Oblivion cannot be viewed.
2. The contents of "Trash Can" can be recovered. Comments in Oblivion cannot be recovered.

A comment, starting out in the "Awaiting moderation" queue, can be moved in several ways.

1. Into "Published", using the "Publish" button.
2. Into Oblivion, using the "Delete" button.
3. Into "Spam", using the "Spam" button.

A comment, in the "Published" queue, can be moved in two ways.

1. Into Oblivion, using the "Delete" button.
2. Into "Spam", using the "Spam" button.

A comment, in the "Spam" queue, can be moved in two ways.

1. Into "Published", using the "Not spam" button.
2. Into Oblivion, using the "Delete" button.

It's apparently possible to move comments back and forth, between "Published" and "Spam". Presumably, either movement provides some training of the comment spam filters.

1. From "Published" to "Spam", using the "Spam" button.
2. From "Spam" to "Published", using the "Not spam" button.

There is no similar symmetry of movement, for the "Awaiting moderation" or Oblivion states.

1. A comment in "Awaiting moderation" can be moved into either of the other 3 states - Oblivion, "Published", or "Spam". Once moved, a comment cannot be moved back into "Awaiting moderation".
2. A comment can be moved into Oblivion, from any of the other 3 states - "Awaiting moderation", "Published", or "Spam". Once moved, a comment cannot be returned from Oblivion.

If you're moderating comments, you need to understand the asymmetry. Once you move a comment, and you recognise a mistake, you cannot always move it back to correct your mistake.

>> Top

If You Moderate Comments Using Email, Mark The Spam Properly

One evidence of confusion, in Blogger Help Forum: Something Is Broken, comes from blog owners who are moderating comments, to their blogs, using comment moderation email.

I am constantly assailed by spam comments, being published to my blog, delivered to my Inbox! Is there anything I can do, about the spam, except just keep deleting?

Comment moderation, using email, offers several choices for action - but only one action will have any actual effect upon the spam.

When you moderate comments using email, and you are using comment moderation email - not comment notification email, you'll have the same choices for comment moderation, as when you use the Blogger dashboard wizard.

• Publish
• Delete
• Mark as spam

You'll have an additional choice, too.

• Moderate comments for this blog.

The latter choice gives you - when you are properly logged in to Blogger - quick access to the dashboard Comments wizard, to moderate from there.

As with using the dashboard wizard, the choice here is crucial. You need to mark spam comments as Spam. If you delete, the comment goes away - and nothing is done to train the spam filters. Spam comments, deleted, will simply let the spammer continue to annoy you.

With email messages, there are two more actions which some people take - and neither will do anything, directly, about comment spam.

• Some people will delete the email message - and this simply removes the email message, and the emailed copy of the spam, from the Inbox.
• Other people will use the "Spam" email mark. This selection is used to train the email comment filters - but it will only indirectly train the comment spam filters.

Neither deleting the email message, nor marking the email message as spam, will do anything about comment spam.

If you're looking at the comment notification email message, you'll have no comment moderation choices. Here, your only choice will be to delete the email message - if you're concerned with Inbox capacity. You can't moderate, using comment notification email.

Marking an email message, containing a spam comment, as spam - whether you are viewing the comment moderation or comment notification email message - accomplishes nothing. When you mark an email message as spam, you're reporting the sender of the email message. With comment moderation or comment notification email, marking an email message as spam reports the Blogger comment forwarding wizard - and this does nothing about the originator of the spam comment.

Use email to moderate comments, if you like. It's a convenient way to quickly moderate comments - and for some, more convenient than the Blogger dashboard. But make the right choices, when moderating.

>> Top

Control The Email Settings, Relevant To Your Blog, Wisely

Some blog owners don't always think about the various email settings, which are part of their Blogger blogs, and the possible effects to their email - or somebody else's email.

There are several settings, where a blog owner may enter an email address.

• Email posts to
• Comment Moderation.
• Comment Notification Email.

These settings don't require acceptance by the recipient, making for some interesting possibilities for causing problems in other people's email, as well as one's own email.

There are several Blogger dashboard settings - related to post publication and to various commenting activities - with differing effect to one's own, or somebody else's, email.

• Settings - "Mobile and email" - "Email posts to" generates a minimally formatted text copy of each post, when published, to up to 10 email addresses.
• Settings - "Posts and comments" - "Comment Moderation" generates a minimally formatted copy of each incoming comment, before the comment is published - and allows moderation of the comment, while reading the email message - when the recipient has the proper authority.
• Settings - "Mobile and email" - "Comment Notification Email" generates a minimally formatted copy of each incoming comment, before the comment is published or rejected.

Since none of these settings require acceptance by the recipient, there are various possibilities for causing interesting email delivery.

Unlike various subscription services which use email, such as a FeedBurner Email Subscription service, an email address added to any of these three settings requires no formal acceptance. If a blog administrator should add an email address, whether their own (primary or additional personal email address), a willing friend or relative, or an unknown victim's address, there is no initial email sent to the recipient

You (or somebody else) has added this email address as a recipient of "Email posts to" / "Comment Moderation" / "Comment Notification Email". Do you approve of this additional traffic source to your email service?

or a similarly worded notification / approval. Given a clueless or malicious blog owner, it's possible that one (or all) of these settings could be used to harass an unwitting third party.

The "Email posts to" feature, also known as "BlogSend", generates a minimally formatted text copy of each post, when published, to up to 10 email addresses. This setting has been used, in the past, to provide distribution of newly published posts for private blogs, as well as a simple distribution for posts from public blogs.

Since it's limited to 10 entries, BlogSend does not provide a suitable service for any blog with a reader population of any appreciable size. For a blog owner with any technical experience, FeedBurner Email Distribution is a much better solution for post distribution - when the blog in question is publicly accessible.

For distribution of a private blog to more than 10 readers, one may use Google+.

The "Comment Moderation" and "Comment Notification Email" settings, used together, can generate interesting duplication of email to one's own (or somebody else's) email service. If these settings are made without thinking, some interesting confusion can result. Email addresses can be added to each of these settings without consideration of the relationship or level of authority enjoyed by the owner of the email address, relative to the blog in question.

Comment Moderation Email is presumed to generally be a function performed by blog administrators - but email resulting from this setting will be sent to anybody addressed. A blog administrator / member - or other non administrator of the blog or an unwitting stranger - will receive email suggesting several options,

Publish
Delete
Mark as spam

Moderate comments for this blog.

If the recipient is not an actual blog administrator, the links in the email provide confusion, and no result.

Comment Notification Email might be generally addressed to blog members - but is not necessarily limited. Since notification of comments is sent separately from moderation, recipients of a notification can become confused when they fail to find the comment, mentioned in the notification, present on the blog. A blog administrator, using either an email moderation message - or using the blog Comments wizard, may or may not decide to Publish - or to designate a comment as Spam - regardless of a notification message having been delivered to each designated recipient.

Comment notification email may look similar to comment moderation email, less the comment processing options - possibly causing more confusion. A blog owner, adding his own email address to both comment moderation and comment notification, may see the combination as unknown duplication. And blog owners may confuse the proper use of comment moderation and comment notification email.

A blog owner, transferring ownership of a given blog, may overlook updating of the email settings. A new blog owner, receiving a blog being transferred, may likewise overlook these settings, and may lack the associated email, until the omission is corrected.

Either the previous owner, or the new owner, may be confused temporarily - and may wonder why they are still getting email / not getting email, until they examine and correct the setting in question. Alternately, if someone's email address was added maliciously, by a blog owner intending to harass somebody, one can see interesting possibility for conflict.

>> Top

Use Of Google+ For Networking, And Keeping Your Blogger Account And Blogs Safe

One constant activity in Blogger Help Forum: Something Is Broken involves blog owners whose blogs were deleted - either righteously or spuriously - as part of the ongoing battle against spam, in Blogger blogs. Generally, the problem comes directly from the blog content.

Sometimes, the problem is more subtle.

When I tried to login to Blogger, I got a screen that said my account needed to be verified, due to "unusual activity on my account". Having verified my account, I see that my blogs have been deleted.

This is part of one of the more intriguing episodes, in the never ending fight against hacking and spam, in Blogger.

Some Blogger blog owners participate in comment based discussions, and provide their email addresses there. Some state their email addresses openly, in the body of the comments, for the world to see when viewing the comments. Others post comments using their Blogger accounts, knowing that the blog owners can see their email address in the comment moderation / notification email messages - and can contact them using email.

Spammers use comment based networking, to their advantage. They subscribe to any comment thread, using the "Notify me" option - then wait while blog readers comment using their Blogger accounts. As the email comes in, from blog readers commenting, they scrape the email addresses from the email content. Since most people commenting either openly state their blog URLs in the comment bodies - or link to a list of their blogs - the spammer now has two essential ingredients, to be used for hacking someone's Blogger account, and gaining control of the blogs owned by the account.

Google now provides Google+, where we can network with a designated audience, and avoid spam in our email. Using Google+, our email addresses are not revealed, and spammers have less incentive to use Google+ for email address harvesting. This protects our Blogger accounts and blogs against hacking, and relieves us from email based spam.

For people who update their Blogger accounts to use Google+ based profiles, but continue to network using Blogger comments, Blogger now protects us by using anonymous email addresses in all comment generated email. This leaves people who continue to comment, using Blogger accounts with native Blogger profiles, vulnerable to ongoing email address harvesting, and account hacking.

Blogger account hacking, using email addresses harvested from Blogger blog comments, will typically involve brute force password guessing. Blogger, detecting brute force attempts against a vulnerable Blogger account, will lock the account and the blogs. Once we verify ownership of our Blogger account - and hopefully change the Blogger account password to something less vulnerable to guessing - the blogs owned by a possibly compromised account remain locked, until they can be examined for signs of tampering, by Google security / spam analysts.

We also must consider the possibility that not all brute force password guessing attacks are being detected by Google - and some Blogger accounts are being deviously, and temporarily, hijacked.

People who setup Blogger accounts based on bogus email addresses - or who have accounts based on old email addresses which they can't use - continue to present a challenge here. These people will never receive essential email advising them of a problem in either verifying their Blogger account - or their blogs. This will continue to make our initial spam lock advice relevant.

Can you login to Blogger? Do you have a dashboard link "Deleted blogs"? That's where you start.

You wait 24 to 48 hours after submitting a Restore request - then you post back here, and we take the next step.

>> Top

Blogger Won't Censor Comments, Or Accept Abusive Comment Reports

We have seen this question, periodically, in Blogger Help Forum: How Do I?

When will Blogger provide me with the option to block an abusive commenter, from my blog?

This is a request that simply cannot be fulfilled.

The issue of blocking individual commenters won't be solved by a new Blogger feature.

• It's technically impossible.
• It's contrary to Blogger policy.

Any abuser of Internet services (aka "hacker", "spammer", or "troll"), with any ability, knows how to create multiple Google accounts without effort. Blogger Engineering is unlikely to spend time developing a new feature ("Block this comment publisher") that will simply provide you with a false sense of security, have no effect in the long term, and require an unproductive use of their time.

If you realistically feel that a comment publisher represents a legal and physical threat to you, you should report the threat to your local police agency. Other than physical threats, Blogger regards comments as a "freedom of speech" issue. Comments published on your blog are jointly the property - and the responsibility - of the comment publisher, and you.

As the blog owner, you are allowed to choose which comments publish, or remain published, on your blog. You can moderate before, or after, comments are published.

If any comments offend you, moderate or delete them promptly. Concentrate on publishing your blog, and ignore the abuse. Eventually, the person abusing you will get bored, and move on.

>> Top