Most active commenters

    ←back to thread

    238 points nafnlj | 11 comments | | HN request time: 1.297s | source | bottom
    Show context
    firefoxd ◴[] No.46241861[source]
    Traffic to my blog plummeted this year and you can never be entirely sure how it happened. But here are two culprits i identified.

    1. Ai overview: my page impressions were high, my ranking was high, but click through took a dive. People read the generated text and move along without ever clicking.

    2. You are now a spammer. Around August, traffic took a second plunge. In my logs, I noticed these weird queries in my search page. Basically people were searching for crypto and scammy websites on my blog. Odd, but not like they were finding anything. Turns out, their search query was displayed as an h1 on the page and crawled by google. I was basically displaying spam.

    I don't have much control over ai overview because disabling it means I don't appear in search at all. But for the spam, I could do something. I added a robot noindex on the search page. A week later, both impressions and clicks recovered.

    Edit: Adding write up I did a couple weeks ago https://idiallo.com/blog/how-i-became-a-spammer

    replies(4): >>46242006 #>>46242043 #>>46242457 #>>46243693 #
    1. bootsmann ◴[] No.46242006[source]
    Sorry but how did 2 work before you fixed it? You saved the queries people did and displayed them?
    replies(2): >>46242070 #>>46242086 #
    2. firefoxd ◴[] No.46242070[source]
    So the spammer would link to my search page with their query param:

        example.com/search?q=text+scam.com+text
    
    On my website, I'll display "text scam.com text - search result" now google will see that link in my h1 tag and page title and say i am probably promoting scams.

    Also, the reason this appeared suddenly is because I added support for unicode in search. Before that, the page would fail if you added unicode. So the moment i fixed it, I allowed spammers to have their links displayed on my page.

    replies(5): >>46242183 #>>46242413 #>>46243227 #>>46243397 #>>46243672 #
    3. chii ◴[] No.46242086[source]
    i imagine the search page echoed the search query. Then, a SEO bot automated search(s) on the site with crypto and spam keywords, which is echo'ed in the search results - said bot may have a site/page full of links to these search results to create fake pages for those keywords for SEO purposes (essentially, an exploit).

    Google got smart and found out such exploits, and penalized sites that do this.

    4. Calavar ◴[] No.46242183[source]
    Reminds me of a recent story on scammers using search queries to inject their scam phone numbers into the h1 header on legitimate sites [1]

    [1] https://cyberinsider.com/threat-actors-inject-fake-support-n...

    5. Neil44 ◴[] No.46242413[source]
    Interesting - surely you'd have to trick Google into visiting the /search? url in order to get it indexed? I wonder if them listing all these URLs somewhere are requesting that page be crawled is enough.

    Since these are very low quality results surely one of Google's 10000 engineers can tweak this away.

    replies(1): >>46242772 #
    6. input_sh ◴[] No.46242772{3}[source]
    > surely you'd have to trick Google into visiting the /search? url in order to get it indexed

    That's trivially easy. Imagine a spammer creating some random page which links to your website with that made up query parameter. Once Google indexes their page and sees the link to your page, Google's search console complains to you as the victim that this page doesn't exist. You as in the victim have no insight into where Google even found that non-existent path.

    > Since these are very low quality results surely one of Google's 10000 engineers can tweak this away.

    You're assuming there's still people at Google who are tasked with improving actual search results and not just the AI overview at the top. I have my doubts Google still has such people.

    replies(1): >>46243973 #
    7. layer8 ◴[] No.46243227[source]
    What does Unicode have to do with links?
    replies(1): >>46243442 #
    8. indymike ◴[] No.46243397[source]
    This has been a trick used by "reputation management" people for years.
    9. jdiff ◴[] No.46243442{3}[source]
    Lot of spam uses unicode, either for non-English languages or just to swap in lookalike characters to try and dodge keyword filters.
    10. francisofascii ◴[] No.46243672[source]
    Great blog post. You typically think of people linking to your website as a good thing. This is a good counterexample.
    11. Neil44 ◴[] No.46243973{4}[source]
    I messed around with our website trying url encoded hyperlinks etc but it was all escaped pretty well. I bet there's a lot of tricks out there for those with time on their hands. Why anyone would bother creating content when Google AI summary is effectively going to steal it to intercept your click is beyond me. So the whole issue will solve it's self when google has nothing to index except endless regurgitated slop and everyone finally logs off and goes outside.