April 26th, 2010 by adam

One great achievement of the web is the huge reduction in barriers to publishing. But the flipside is that we now see extremely low incentives for publishers to keep content “live”. Back when it cost money to publish info, you had good reasons to *keep* your content live once it had been published; you had a revenue stream to protect.

Nowadays, with publishing costing nothing, it’s often un-monetized. All it takes is the slightest increase in hassle for the publisher, and they’re better off killing the content entirely.

That’s the case with a site I just shut down. A small, incomplete – yet moderately valuable – resource for iPhone Developers, with a few thousand unique visitors a month. Too small to be worth monetizing, so I hadn’t. I was eating the (very small) hosting and support costs, until someone abused the site, and those “support costs” became non-trivial.

iPhoneDevelopmentFAQ – history

I created this site at the start of 2009, because there was no good FAQ for iPhone Development (AFAIAA there still isn’t; even today, the nearest you can get is StackOverflow. SO is great, but … a lot of subjects are “forbidden” under the site terms, and the site-search is very weak).

I set it up to be low maintenance, and to allow multiple people to moderate it (very similar lines to SO, but slightly less open, and a lot more “niche”).

In the past two weeks, after more than a year of “no active moderation”, we saw forged posting credentials and then pointless offensive questions. First rule of running a passive website: leave it configured to report (surreptitiously) on all unusual activity, so you can see if it gets out of hand / abused / attacked / etc.

Options

Deleting offensive content requires only a couple of minutes (to remember the password, login, and hit delete).

Checking what happened with the forged credential (probably unrelated) is more like half a day to a couple of days. I could audit the code, audit whatever 3rd-party PHP libraries were being referenced, and almost certainly plug the hole (or holes).

Or … I could do what I actually did: two lines of typing, and Apache kills the site. In a way, it’s a bit sad – it had background traffic of a few thousand uniques a month – and the whole thing is now gone.

The fragility of niche interests

At the end of the day, I get *zero benefit* from this site. I pay a tiny amount for the web-hosting and the domain-hosting, so it’s almost free, and I’m happy to leave it running for the benefit of the thousands of visitors each month.

But if it’s going to start costing me hundreds (or thousands) of dollars in lost time when I would otherwise have been doing paid contract work (every hour not working is an hour’s salary lost) … then the balance switches and (as in this case) I’m obviously going to kill the site.

I expect that the people who abused the site were just being thoughtless, and probably wouldn’t have ever gone back anyway. But I can’t afford the time to make sure.

Ultimately: Who has the time for this? A handful of callous acts just killed a repository of info.

December 9th, 2009 by adam

A year or so ago I did a roundup of the major free Web Analytics services. I was interested to see how Google Analytics had affected the market: was there a market left any more?

One of the trials I signed up for I found so useful I carried on using after I’d written the review. GetClicky had a lot less information than some services – including GA – and less detail than the free tools I already run on all my websites (e.g. AWstats). But it was a lot more user-friendly, presenting the most critical information all at once on a single screen.

Today I finally started disabling GetClicky on my sites; the company has forceably blocked my site from their service. Why? Because I had a week of heavy traffic *while I was using the premium version which allows unlimited traffic*. That’s it. I stayed within their requirements, but I was banned anyway. That suggests to me that their company is in trouble…
(more…)

June 26th, 2009 by adam

(this assumes you are running Debian on your server; if not, I suggest you switch)

Mediawiki. One of the world’s less secure wikis? Probably. I use and install it a lot, and it’s usually “the compromise wiki”: it’s weak at a lot of things, but it’s the “least worst overall” a lot of the time. Here’s my current standard fixes and tweaks.

(more…)

December 28th, 2008 by adam

The simple guide I found here doesn’t actually work, although it “mostly” works. Several bits are out of date. Even then it only *partly* works, because it leaves all PEAR commands as requiring root to run. That may be what you want, but I doubt it. Not what I wanted.
(more…)

December 26th, 2008 by adam

phpMyFAQ is a nice idea, and mostly it’s well done, but with a few basic mistakes in how it’s been implemented that were so annoying I couldn’t live with them. There’s no Debian package for this app, sadly, so things like “using a better version of TinyMCE” require you to manually fix them all (no package-management based solution here, unless you want to maintain it yourself?).
(more…)

November 21st, 2008 by adam

Just wanted to say: I detest “cron” more than mere words have the power to convey. I suspect there aren’t many other pieces of fundamental software implemented in so few lines of code that over so many years have caused so much harm and frustration to so many people and systems (surprisingly, cron has often been the point of error in weird failures of clusters of servers I’ve dealt with – e.g. when the backups mysteriously stop working, or an app crashes and won’t restart, etc)
(more…)

September 28th, 2008 by adam

This is a quick review of free tools for web analytics / stats-analysis / weblog analysis. I’ll follow up with some more detailed posts about non-web tracking. Follow-up posts will extend this into game development, but this post is purely about web stuff.
(more…)

September 26th, 2008 by adam

Well, obviously, it ain’t possible, but sometimes you can do it using Google…
(more…)