Diagnosing AdSense Account Problems

AdSense uses various techniques to protect their content quality - and when they take action, they don't always give you a lot of clues about their actions, or warnings before taking action.

Both AdSense and Blogger use fuzzy analysis to classify unacceptable content and practices. Neither AdSense or Blogger can publish definitive policy advice, each time they classify or suspend an account.

AdSense publishes policy guidelines - and prohibited content, to define the limits.

AdSense works best when staying well within the limits.

Like Blogger, AdSense requires blog owners / publishers to stay within the limits.

We want to maintain a strong ecosystem for both advertisers and publishers. As a publisher, you are responsible for maintaining high quality inventory and traffic.

People who stray outside the limits should not expect detailed coaching, which let them determine exactly what limits can't be exceeded.

When you exceed the limits, you may not like the results.

Bad news, seen by some too late.



Dodgy techniques and traffic cause problems with both AdSense and Blogger - and both AdSense and Blogger will take action.

For best results, read and follow required practice.

When an AdSense account is suspended, AdSense provides a Disabled Account FAQ. You can use the FAQ - but you'll do better to read the policies, and stay within the limits.

You can appeal, after correcting a problem - within limits.

You'll find limited support for appealing - even after identified problems are resolved.

Thanks for contacting Google AdSense. According to our records, you already appealed to us twice in the last 30 days. Due to the volume of appeals we receive and as indicated in our help center you can't appeal more than twice per month.

If your previous appeals have been unsuccessful please remember that our actions are the result of careful investigation by our team of dedicated specialists, taking into account the interests of our advertisers, publishers, and users. Though you might be disappointed with our decision, we are unable to reinstate your account.

If you have new information which may have helped us to reinstate your account then you are welcome to submit another appeal next month.

We appreciate your patience and understanding.

An effective appeal requires two definitive details.

1. Acknowledge what you did wrong.
2. Describe what you are doing to prevent its recurrence.

The best action will be to read and observe published policies.

---

Like #Blogger, #AdSense does not provide detailed advice, or advance warning, about unacceptable content or practice. AdSense publishers are simply expected to read their policy documents - and stay well within the limits.

Read More

True Online Anonymity Begins With A New Identity

We see occasional queries, from blog owners who require separation of their blog ownership from their real lives, in Blogger Help Forum: Learn More About Blogger.

I want to have myself anonymous, so that people do not know who I am when I blog. i think it will contribute to a more exciting blog!

An air of mystery is OK, as long as it's not being used to mask criminal activity.

Taking a public account and blog, and removing all personal details, can be an exercise in futility - or at least, ingenuity.

Blogger / Google code contains details, which may reveal too much.

We know that Blogger permits us - and will support us - to publish a blog, anonymously - with our blogging and real life identities kept separate. They don't provide details, though - possibly because each person may have their own ideas how separate they want everything to be.

Both Blogger accounts and blogs contain obscure details, which might be exploited by someone who is experienced in identity tracing.

One detail, which is frequently used in blog ownership analysis, is the "me" tag, in the blog header. The "me" tag is not documented - it's just there, in the blog source code.

I like to cook.

Who knows if the "me" tag in my "Recipe" blog, leading to my Google+ profile, could one day lead the wrong person to my door?



Who knows what other details may be present, in a Blogger / Google profile, or blog internal code?

For true anonymity, start with a clean account and blogs.

If you want true anonymity, start with a new Blogger account which contains no personally identifying content. And if possible, delete your current Blogger account.

Then setup a new Blogger blog - and again, add no personally identifying content. And do not link between anything in your clean, new Blogger account, and anything in any other accounts.

The best chance for anonymity starts with 100% isolation of the new Blogger account.

Conduct frequent personal identity audits, and educate yourself.

As you publish your blog, look at each opinion and story, and ask yourself how this could be used against you.

Spend some time on the Internet, and read about identity verification, pursuit of fugitives, and similar detective work. Spend some time reading stories about the US Witness Security (WitSec) Program, and similar programs in other countries - and how they protect their clients.

Their stories could become your learning opportunities.

True anonymity will have disadvantages.

If you truly make yourself anonymous, there will be no backdoor authentication details. You will not be able to recover control of the blog if you ever forget the account name or password.

If you remember account / password, you may not need backdoor authentication.

Neither Blogger: Forgot your username or password? - or Google: Having trouble signing in or viewing your blog? - will have any details which can be used to recover access, if you become truly anonymous. If there are any such details which could be used by you, to recover access or control, those details might be your downfall, when an experienced detective is put on your trail.

You will need protection from Google Hacking Detection, eventually.

If your account gets locked from "suspicious" / "unusual" activity, or when you change computers or travel, you will need anonymous backup authentication. You will need one or more components of Google 2-Step Verification. Just recording account name / password in a password storage vault won't help, if Google Hacking detection becomes involved.

You're going to have to have some backup authentication - just choose what you use selectively, keep it up to date, religiously - and never lose it.

---

Some #Blogger blog owners want to separate their blogging and personal lives - and want their blogs to not lead anybody to their real life existence. This can conflict with effective blog publishing - as a blog, by design, is an online extension of ones real life.

Given enough forethought, and research, it may be possible to separate our online life from real life - but it won't be a one time activity. Personal online anonymity will require constant self examination, and preparation.

Read More

Recovering And Protecting Your GMail Account

Blogger blog owners may have productive action, when their Blogger accounts are successfully hacked through an attack on their GMail accounts.

GMail account owners can get detailed instructions on recovering a successfully hacked account, and on preventing future hacking attacks from being successful. Some of the instructions are specific to GMail use - but overall, Blogger account owners will benefit from their use.

To benefit from the GMail instructions, one should consider the differences between Blogger, email, and Google accounts.

GMail provides instructions for recovering hacked / stolen GMail accounts.

Gmail Account Recovery: Gmail Account Recovery and Security provides complete and detailed instructions for recovering a hacked and stolen GMail email account.

The Recovery instructions include specific mentions of Disabled / Suspended accounts, successfully Stolen accounts, and accounts locked or deleted because of Underage owners.

Accompanying the recovery advice is Gmail help and information: How NOT To Get Hacked. These are instructions for preventing a recurrence of a reported problem. This includes discussion of using a strong and secure password, identifying hacking techniques that involve the account owner, and preventing attacks which are conducted using the computer or network in use by the account owner.

Prevention instructions are similarly focused on GMail account security.

The Prevention instructions, many which are common sense issues to any IT professional or security expert, are specifically written to apply to GMail account owners. There may be additional issues which apply in general, to Blogger accounts - and specifically, to Blogger accounts which are based on non GMail email accounts.

There are a few differences between Blogger blog ownership and GMail account ownership, which will cause issues that cannot be easily resolved by Blogger Support, or by GMail Support, to the satisfaction of the (former) blog owner.

GMail accounts, unlike Blogger accounts, do not contain transferrable assets.

GMail accounts are, by nature, single owner - and ownership of a GMail account is never transferred. In contrast, Blogger blogs can be under team ownership - and ownership can be transferred.

• Intentional team blog ownership. Team blog ownership can cause problems with loss of blog control, when all known blog administrators (accidentally or intentionally) remove themselves as administrators, leaving an unknown administrator.
• Intentional transfer of control. A blog owner may assign administrator status to another person, voluntarily - then later regret his decision.
• Un intentional transfer of control. A blog owner may assign administrator status to another person, voluntarily - and the other person may then remove the former owner administrator status.
• Ownership theft after account hacking. A hacker, having temporarily gained control of a Blogger account, may transfer ownership of a blog to another Blogger account.

All of these scenarios are regarded as simple transfer of blog ownership, by Blogger Support.

Though maybe not preferred by the (former) blog owner, the blog in question will now be under control of another person. It's possible that some of these scenarios are considered by Google Security, when reviewing Blogger / Google accounts after hacking activity is detected.

Blogger accounts based on non GMail email have typical third party issues.

Blogger accounts, based on non GMail email addresses, will be subject to the typical uncertainty which accompanies any third party service in Blogger. Some details may be involve the email provider, while others will involve Blogger - and arbitrating between the two will be the responsibility of the Blogger account owner.

Owners of Blogger accounts which are based on non GMail email addresses will need to contact the providers of the actual email service, for resolution of some of these issues.

In general though, the GMail Account Loss Prevention and Recovery instructions provide good advice, for any Blogger account owner.

Read More

Accounts Locked For Unusual Account Activity

One of the more intriguing tales of Blogger blogs, currently being explored, involves blogs mysteriously deleted by Blogger.

My blog just disappeared from my dashboard - and no, it's not listed under "Deleted blogs"!

In some cases, the owner knows more than is implied, from the obvious wording of that problem report.

As Blogger / Google continues to improve the hacking / malware detection and removal process, they are making the recovery of accounts locked for "suspicious" / "unusual" activity easier - and more transparent. The increased transparency may, in some cases, cause mystery.

Diagnosing the many mysterious blog disappearances, currently being reported in Blogger Help Forum: Something Is Broken, may involve what the blog owner does not report - as much as what the owner does report.

Hacking Detection / Recovery is constantly being improved.

Blogger / Google is constantly refining the hacking detection / recovery process, to both improve the possibility that any activity will be detected, and to make it easier for the victims of the hacking to deal with the recovery process. As they make it easier for the owners to recover the accounts locked, they make it less likely that the owners will mention the locked account recovery, when later reporting the blogs, mysteriously missing from the dashboard.

Some owners will provide vague clues, alluding to hacking detection.

In some cases, the blog owner will provide vague clues, which refer to an immediately previous account unlock.

• Required to change the account password.
• Required to provide a phone number - and receive either a text or voice message with a recovery code.
• Required to solve a CAPTCHA.

All of these clues can be relevant to a locked account, or to various other anti-hacking / anti-spam activity by Blogger / Google - and can be overlooked as a locked account symptom, when stated in a forum problem report.

Other times, only the circumstances identify the situation.

In other cases, the only clue provided will be that the blogs in question are missing, and not listed in any dashboard list - "Deleted blogs", "Locked blogs", or "My blogs". In cases where we've simply reported missing blogs for malware / spam review, to Blogger Support, we're later advised to instruct the blog owner to recover the account.

Every owner does not always appreciate the diagnostic process.

Since immediate review of any blog cannot be always guaranteed by Blogger Support, it's to everybody's benefit that we request clues to verify the problems being reported. Unfortunately, the questions asked may not always seem relevant to some blog owners, unhappy about the mysterious loss of their blogs - even though they may contribute to the problem, inadvertently.

All owners won't even get email, alerting them to action taken.

And thanks to the possibility that not all blog owners may even get a notice when their accounts are locked, owners with multiple accounts may not even realise that a given Blogger account is locked. These owners find out that a given blog has been deleted, only after it goes offline and expires from cache. This will make some blog owners even less cooperative, when asked to provide diagnostic details about their problems.

Read More

If You Cannot Prove Ownership Of Your Blogger Account, Your Next Step May Involve Court Action

We've explored the issues of Blogger account and blog recovery policy, repeatedly.

We've mentioned the business concerns, the personal support issues, the strategic hacking possibilities, and even the personal implications of prevention.

With all of the warnings, we continue to see evidence of blog owners who just don't understand the message, posting in Blogger Help Forum: Something Is Broken.

I started a blog under an alias, to be able to post anonymously, and can't remember the login details or the e-mail recovery. How can I regain access to my blog?

Last year, Blogger Support offered the "final" word about account recovery assistance, in the forum.

Due to the sensitive nature of these issues, we won't be able to troubleshoot your issue in this public forum.

Even giving that advice, some blog owners still insist that Google is not cooperating, in refusing to restore access to Blogger accounts and blogs, to people who cannot prove their right to ownership.

The policy on ownership recovery, provided by Blogger, is quite simple. Anybody requiring recovery has to prove their right to a given Blogger account or blog, using the tools provided.

Because Google doesn't ask for much personal information when you sign up for an account, we don't have many ways to verify that you own an account.

Blogger / Google provide two automated recovery tools - and that is the limit of their involvement. Every Blogger blog owner, who actively publishes a blog, and who wants to keep their blog under their control, needs to appreciate this limit - this is how Blogger and Google prevents devious hijacking of our blogs.

For those blog owners who truly need - and deserve - control of their lost blogs, there is one final recourse. Any owner, who cannot use the Blogger / Google automated tools, are entitled to take their concerns outside Google, and have their identity certified by the courts. Start by hiring a lawyer, take the matter to a judge, and get a properly issued court order. Then, serve the court order, properly, to Google.

Let's let the courts assume responsibility of deciding who is a worthy blog owner - and who is potentially a blog thief or hacker.

Read More

Recovery From Locked Blogger / Google Accounts

Not all blog owners understand the reasons behind the locked Blogger / Google accounts.

Even less understand why recovery of locked accounts, and of the blogs owned by the locked accounts, is not immediate. We see the occasional report, in Blogger Help Forum: Something Is Broken.

I had to change the password on my account - and now my blogs are deleted! Why should I wait another "24 to 48 hours" to get my blogs back?

This blog owner does not understand the possible reasons for the locked account - and the work that goes on after the account is unlocked.

Brute force hacking of our Blogger / Google accounts, by hackers / spammers, who have use of the various botnets in the Internet, is a constant activity. Opposing activity, by the Security teams in Blogger / Google, to not let hackers and spammers take control of our accounts and blogs, is just as constant.

Some of the Security activity requires our patience - and blog owners, having to recover their deleted blogs, are not always patient.

The Security processes, in Blogger / Google hacking prevention, have to work from a worst case scenario, when detecting hacking activity.

Immediate detection of hacking is not always a possibility.

Account hacking cannot always be detected instantly. When hacking is detected, the hacking prevention process has to consider the possibility that the accounts under attack have already been compromised.

When Blogger / Google Security detects possible brute force hacking against an account, they lock the account - and delete the blogs owned by the account.

Alternatively, they quarantine the computers used in the hacking activity. This is where we see the notice of "suspicious account activity" - and possibly the dreaded "403 Forbidden".

Post detection security analysis looks at owner mistakes, and for hacking artifacts.

When we discover a locked account, and request its restore, the security process looks for signs of security weaknesses allowed by the account owners - or possibly added by the (temporarily) successful hacker. In some cases, the owner may be required to change the account password, and receive instruction on using a more secure ("strong") password.

Ongoing efforts by Blogger / Google, to make the account recovery easier for the blog owners to endure, may cause mystery about blogs missing from the dashboard, without obvious recovery options.

After the account is restored, all blogs must be carefully checked.

After the Blogger / Google account is restored, the integrity of the blogs owned by the account must be verified.

• The blog content must be examined for spammy content added.
• The blog Permissions list must be checked, for backdoor accounts added.
• The Mail-to-Blogger settings must be considered as a possible backdoor.

These are simply examples of what must be done, to ensure that our blogs were not compromised, even temporarily, by the hacking just detected. After you get your account back, it's not a bad idea for you to verify this, on your own. If you just got your blog back, after resetting your Blogger account password and / or verifying your phone number, check your template carefully, looking for references to unfamiliar JavaScript code, hosted outside Google address space.

Account / blog verification will take time.

The process of account and blog integrity verification will require an unpredictable time period - and needs to be done with the blogs inaccessible to anybody but the Blogger / Google security processes. The blog being offline may not be immediately observed by the owner - and this may cause more confusion.

Blogger Support is aware that nobody wants to deal with the stress of having a locked or deleted blog - especially after they have gone through the process of verifying their account. They are also well aware of the frustration that is present when someone reports

Somebody is publishing spam on my blog - and I can't access the dashboard to remove the spam!

Locking the owned blogs, after hacking activity is detected, complements the ongoing policy of not disclosing the account names, in helping to keep our blogs under our control.

---

http://blogging.nitecruzr.net/2013/01/confusion-over-recovery-from-locked.html
Confusion Over Recovery From Locked Blogger / Google Accounts

Read More

Use Of Google+ For Networking, And Keeping Your Blogger Account And Blogs Safe

One constant activity in Blogger Help Forum: Something Is Broken involves blog owners whose blogs were deleted - either righteously or spuriously - as part of the ongoing battle against spam, in Blogger blogs. Generally, the problem comes directly from the blog content.

Sometimes, the problem is more subtle.

When I tried to login to Blogger, I got a screen that said my account needed to be verified, due to "unusual activity on my account". Having verified my account, I see that my blogs have been deleted.

This is part of one of the more intriguing episodes, in the never ending fight against hacking and spam, in Blogger.

Some Blogger blog owners participate in comment based discussions, and provide their email addresses there. Some state their email addresses openly, in the body of the comments, for the world to see when viewing the comments. Others post comments using their Blogger accounts, knowing that the blog owners can see their email address in the comment moderation / notification email messages - and can contact them using email.

Spammers use comment based networking, to their advantage. They subscribe to any comment thread, using the "Notify me" option - then wait while blog readers comment using their Blogger accounts. As the email comes in, from blog readers commenting, they scrape the email addresses from the email content. Since most people commenting either openly state their blog URLs in the comment bodies - or link to a list of their blogs - the spammer now has two essential ingredients, to be used for hacking someone's Blogger account, and gaining control of the blogs owned by the account.

Google now provides Google+, where we can network with a designated audience, and avoid spam in our email. Using Google+, our email addresses are not revealed, and spammers have less incentive to use Google+ for email address harvesting. This protects our Blogger accounts and blogs against hacking, and relieves us from email based spam.

For people who update their Blogger accounts to use Google+ based profiles, but continue to network using Blogger comments, Blogger now protects us by using anonymous email addresses in all comment generated email. This leaves people who continue to comment, using Blogger accounts with native Blogger profiles, vulnerable to ongoing email address harvesting, and account hacking.

Blogger account hacking, using email addresses harvested from Blogger blog comments, will typically involve brute force password guessing. Blogger, detecting brute force attempts against a vulnerable Blogger account, will lock the account and the blogs. Once we verify ownership of our Blogger account - and hopefully change the Blogger account password to something less vulnerable to guessing - the blogs owned by a possibly compromised account remain locked, until they can be examined for signs of tampering, by Google security / spam analysts.

We also must consider the possibility that not all brute force password guessing attacks are being detected by Google - and some Blogger accounts are being deviously, and temporarily, hijacked.

People who setup Blogger accounts based on bogus email addresses - or who have accounts based on old email addresses which they can't use - continue to present a challenge here. These people will never receive essential email advising them of a problem in either verifying their Blogger account - or their blogs. This will continue to make our initial spam lock advice relevant.

Can you login to Blogger? Do you have a dashboard link "Deleted blogs"? That's where you start.

You wait 24 to 48 hours after submitting a Restore request - then you post back here, and we take the next step.

>> Top

Read More

Blogger Supports Their Customers

Every week, in Blogger Help, we see the cries of frustration.

Many years ago I had a Google account with a "gmail.com" e-mail address. But I deleted this account, because I didn't need it anymore. Later, I wasn't able to login to Blogger, to delete my blog. And I also wasn't able to remove it by contacting Blogger. Why doesn't Blogger support their customers?

The point being overlooked here is that both Blogger and Google do support their customers.

Blogger / Google, like every commercial enterprise worldwide, simply supports their active customers more than their not-so-active customers.

1. They have millions of customers, who spend much time maintaining and publishing their blogs.
2. They also have some customers, who start blogs, and leave them dormant for many years - then require assistance recovering access to their Blogger accounts, because they have forgotten the account name or password, and the backup email address can't be used.

Considering that Blogger / Google is not a non profit organisation, and needs to support customer activity, which group of customers should they support most readily?

Blogger / Google wants to encourage us to maintain and to publish our blogs regularly.

Blogger can't support inactive blog owners, to the needed level.

People who don't use their services regularly, then demand special assistance when needing to use their services, are not going to receive the same level of support.

1. People who use Blogger regularly will develop a level of proficiency - and won't require special assistance as much as those who don't use Blogger regularly.
2. People who use Blogger regularly simply require a working Blogger interface, and a level of security that keeps their blogs under their control. People who don't use Blogger regularly need a different and more complicated Blogger interface - and a lower level of security, so they can continue to access their Blogger accounts.

The needs of the few (who don't use Blogger regularly) have to be considered against the needs of the many (who do use Blogger regularly).

Blogger can't support inactive owners, over active owners.

Recently, we had a series of well organised hijackings of actively published Blogger blogs.

After Blogger / Google recognised this ongoing threat - which endangers all Blogger blog owners - they tightened down their security, and restricted assistance to those needing help recovering access to their Blogger accounts. People who don't use Blogger regularly don't understand the reasoning behind this reduced level of assistance, and increased level of security.

Unfortunately, understand it or not, we all have to learn to live with it - if we wish to continue publishing Blogger blogs.

Read More