<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Static in the Ether &#187; blogsec</title>
	<atom:link href="http://lair.moria.org/blog/archives/category/security/blogsec/feed" rel="self" type="application/rss+xml" />
	<link>http://lair.moria.org/blog</link>
	<description>Unix, Information Security &#38; Systems Administration</description>
	<lastBuildDate>Wed, 11 Nov 2009 09:14:29 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Wierdo comment spam</title>
		<link>http://lair.moria.org/blog/archives/82</link>
		<comments>http://lair.moria.org/blog/archives/82#comments</comments>
		<pubDate>Tue, 19 Aug 2008 12:03:16 +0000</pubDate>
		<dc:creator>Barry Irwin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[blogsec]]></category>
		<category><![CDATA[blog]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[wordpress]]></category>

		<guid isPermaLink="false">http://lair.moria.org/blog/?p=82</guid>
		<description><![CDATA[The last few weeks has seen a deluge of comment spam, which mostly is the run of the mill bot based stuff advertising &#8216;cheap hosting&#8217; , porn and other such sites.  a couple tht cought my attention were simple posts of urls with the following sort of format: http://www.google.com/search?q=rxbcrobh http://www.google.com/search?q=frhlrxca http://www.google.com/search?q=omihinga Searching on google with [...]]]></description>
			<content:encoded><![CDATA[<p>The last few weeks has seen a deluge of comment spam, which mostly is the run of the mill bot based stuff advertising &#8216;cheap hosting&#8217; , porn and other such sites.  a couple tht cought my attention were simple posts of urls with the following sort of format:</p>
<blockquote>
<ul>
<li>http://www.google.com/search?q=rxbcrobh</li>
<li>http://www.google.com/search?q=frhlrxca</li>
<li>http://www.google.com/search?q=omihinga</li>
</ul>
</blockquote>
<p>Searching on google with these links, surprisingly turns up nothing.  I was expecting to find lists of malware infected sites similar to the SQL injection attacks seen in the last few months.  Does anyone have any insight into these ? Sources appear to be geographically dispersed, and scattered across a variety of blog entries, old and new?</p>
]]></content:encoded>
			<wfw:commentRss>http://lair.moria.org/blog/archives/82/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
