Feb 19 2007

How to Remove a Site you “Author” on Mybloglog

Published by at 2:17 pm under blogging,mybloglog

It seems some unscrupulous operators are adding unsuspecting authors to their communities on mybloglog – presumably to boost exposure for their blogs.

If you find you are suddenly authoring a site that you don’t in fact author here’s what you do.

1. Go to “my home”

2. Click on Edit Settings in the site you want to remove Edit settings on mybloglog

3. Scroll down until you see the heading “Remove Site/Blog from My Profile”

4. Click the Remove Site/Blog button

Remove Site/Blog

I think this (and yesterday’s debacle) highlights the need to put some counter measures in place (like a confirmation email sent to the new author).

Update: Mybloglog’s blog is reporting this issue as being fixed – but any links out there are still effective – so DON’T click on them.

Update 2: Please read MyBlogLog’s Blog.

7 responses so far

7 Responses to “How to Remove a Site you “Author” on Mybloglog”

  1. # Scotton 19 Feb 2007 at 4:05 pm

    MyBlogLog did send out authorisation emails when someone adds you to co-author a site. The problem is that people click on these fishing links and have themselves trapped. What have we learnt?

    1. Even Chow and Shoemaker fall for the fishing links.
    2. Cross site scripting is a major problem on MyBlogLog.

    Well, we can’t blame people for blindly clicking on a link sent to you in emails, especially when the content is so inviting, can we? :)

    As of (2), I think there might still be a lot of work in MyBlogLog.

  2. # Megon 19 Feb 2007 at 5:10 pm

    1. That really surprises me!
    2. I agree.

    The problem is reported to have been fixed. I guess we’ll wait and see.

  3. # HMTKSteveon 20 Feb 2007 at 1:43 am

    The hole was not in the email. The hole was that anyone could email you a request (that you would ignore) and then construct the http link that you received to approve the request without your knowledge.

    MyBlogLog has fixed this hole.

  4. # Megon 20 Feb 2007 at 7:20 am

    Hi Steve

    Thanks – I thought it was a bit odd.

  5. # Baron VC :: links for 2007-02-19on 20 Feb 2007 at 7:27 am

    […] How to Remove a Site you “Author” on Mybloglog « Dipping into the Blogpond If you ended up getting tricked into becoming a MLB co-author, this is how you get out. It sucks that one click gets you in the mess but to undo it you have to jump through hoops. (tags: mybloglog) […]

  6. # MyBlogLog’s Co-Author Exploit | SYPon 21 Feb 2007 at 11:15 pm

    […] then discovered the exact same thing reported on Blogpond. Apparently both Jeremy Shoemaker and John Chow were affected and added to be the co-authors of […]

  7. # Joe Dunbaron 25 Feb 2007 at 11:58 am

    It took me forever to get rid of those email messages. Thanks for the tip!