Re:Show HN: Mirrorshades – Simple web analytics
by fiatjaf on Monday February 20, 2017 @06:00PM
(#13691810)
I'm developing a simple web analytics also (it's strange to see Mirrorshades here since I started developing something like it some weeks ago) and I want to know about referral spam: Mirrorshades per se doesn't have any better spam filtering than Google Analytics, right? The gain from switching to it is just because spammers still don't know how to spam Mirrorshades, or am I wrong?
[ Parent
| on HN ]
Re:Show HN: Mirrorshades – Simple web analytics
by aparks517 on Monday February 20, 2017 @07:19PM
(#13692192)
Spammers are already doing what they do. I have rudimentary measures in place, but additional data will enable a more sophisticated response. I use the service myself and find spam to be crazy-making. So... ;)
Re:Show HN: Mirrorshades – Simple web analytics
by fiatjaf on Monday February 20, 2017 @08:25PM
(#13692497)
How are they doing what they do? How could a spammer get to know Mirrorshades protocol to send a false referrer report (which is not the Referer header) in an AJAX request?
Re:Show HN: Mirrorshades – Simple web analytics
by aparks517 on Monday February 20, 2017 @09:07PM
(#13692657)
At least some of them appear to use a more general-purpose method than that. They actually load pages and execute scripts with document.referrer and the Referrer header faked-up. Though it's presumably more resource-intensive, it has the benefit of working for a wide variety of analytics setups, both hosted and server-side.
Re:Show HN: Mirrorshades – Simple web analytics
by fiatjaf on Monday February 20, 2017 @10:31PM
(#13693040)
Oh, right, they just got document.referrer, I had forgotten about that.
What if the analytics server actually parsed the referring page to see if there's a real link there and only confirm the referrer after that? Isn't there a third party service that checks these things?