4 ms·
Can’t think what the “ha” would stand for in their analysis, but the se and xx can be indicators of adultness when you have a naive algo for dealing with bot sp
by Terretta 5y ago
Can’t think what the “ha” would stand for in their analysis, but the se and xx can be indicators of adultness when you have a naive algo for dealing with bot spam domains for adult-content-as-spam:
Some even started using multiple X's (i.e. XX, XXX, etc.) to give the impression that their film contained more graphic sexual content than the simple X rating. In some cases, the X ratings were applied by reviewers or film scholars, e.g. William Rotsler, who wrote "The XXX-rating is for Hardcore, the XX-rating is for Softcore, and an X-rating is for comparatively cool films." — https://en.wikipedia.org/wiki/X_rating https://en.wikipedia.org/wiki/X_rating
That said if they think the domain is a soft hit they should look at content, site age and classification in e.g. bluecoat, etc., which would counter the soft domain indicator. If the site allows comments and doesn’t always successfully moderate or filter out adult bot spam links, that can make even clean content sites get filtered. To be clear, not! aware of any spam at this site, but as a heads up to anyone w/ open commenting, comment engines that allow a website link are often bot-bait.
- deleted 5y ago[deleted]
- josephcsible 5y agoI don't think that has anything to do with it, because of this: > It shows that this filter is for this specific host name only, not for the entire haxx.se domain.
- sockmeistr 5y agoNo offence to the other members of haxx, but I suspect Daniel's site is the only one that gets enough traffic to be considered for filtering.
- LordDragonfang 5y agoSomehow that seems worse. Don't apply automatic filters to sketchy, fly-by-night spam sites that pop up and disappear, but do apply purely automatic filters to sites with a significant enough amount of legitimate traffic? That seems to be exactly backwards of the way things should be done if it wasn't mostly security theater.
- account42 5y agoIt's also how machine-learning based "malware detections" work - they don't run in real time on users computers so you can create a fresh executable and it won't be flagged but once enough users run it and their anti-virus software uploads it will get scanned and receive a made-up virus name (and this can and often does happen even if the executable is not malicious).
- Terretta 5y agoBesides what account42 noted, two more things: - Have to consider the domain is a string, not a hierarchy. Too many premier domains have had subdomains with spam, malware, etc., running on some random thing in their namespace, trying to draft on the domain rep. - Legit traffic + comment forms + web links are a thing spam and adult "se.xx 2nite?" bots target. They seek out the ranked traffic to boost their clicks and good rep to boost their SERPs, so -- perhaps counterintuitive -- scoring traffic + rep as an indicator (to be combined with other indicators of course) is sensible.
- lenkite 5y agoThat's because Vodafone believes that daniel.haxx.se implies that "Daniel Has Sex" and is clearly a pornographic web-site un-suitable for its celibate and holy network. Maybe he can change it to daniel.not.haxx.se ?