Seven essential resources to help protect your website from technical attack

Kevin Roderick publishes the widely read and highly acclaimed (among Los Angeles-area journalists, at least) blog LA Observed. But this week, Roderick’s been living a Web journalist’s nightmare. Earlier this week, many Web browsers started blocking access to his website, following Google’s determination that LA Observed included links to sites that were distributing malware – malicious code that could infect readers’ websites with viruses and other nasty stuff.

Roderick ultimately traced the problem to ads running on his site, and took that section down while he worked with his hosting provider to purge the links. A day after clearing the site, Google cleared LA Observed, and traffic is able again to flow normally to Roderick’s site.

I don’t want to write about Roderick’s specific situation, beyond using it as a peg to remind all independent online publishers of the importance of keeping an eye on the tech side of publishing.

Tools such as Blogger and Moveable Type have allowed writing with no tech training to become popular and self-sustaining online publishers. But tech gremlins can attack anyone, and even novices need to pay attention to the threats.

In that spirit, here are seven essential resources for online publishers who don’t want to get burned:

1. Google’s Webmaster Tools
http://www.google.com/webmasters/tools/

Google drives more traffic than any other site online, so it just makes sense for you to use every tool that Google provides you to improve your website’s position in its search engine results. Google’s toolset allows you to submit and track sitemaps of your website’s content, see how Google ranks your content via a simple interface, as well as to learn of any problems that Google is having with your site, problems that might drive your site down in the Google search engine results, or cause it to be blocked altogether.

2. Google’s Safe Browsing Diagnostic Tool
http://www.google.com/safebrowsing/diagnostic?site=http://www.yoururl.com

There is no landing page for this valuable service, so you’ll have to copy and paste the URL above, substituting your URL for “www.yoururl.com”. This page allows you to see what your users will see if Google ends up blocking your page, for similar reasons that it blocked LA Observed. But if you check this page on a regular basis, you won’t have to wait for your traffic to tank, or readers to e-mail you, to discover if you have a problem. The page also will detail the problem for you, allowing you to more efficiently isolate and remove it.

3. Google’s Online Security Blog
http://googleonlinesecurity.blogspot.com/

This is where to go for an overview of website security issues, as they can affect your presence on Google. You’ll want to bookmark the blog’s post on recovering from a website hack in case you ever find your site infected by malware, or blocked because it is linking to such sites.

4. Stop Badware’s Link Clearinghouse
http://stopbadware.org/home/clearinghouse

You can prevent linking to “bad neighborhoods” online, including malware sites, by checking links through this page, before adding them to your site. Obviously, if you permit user-generated content on your website, and allow readers to post links, you won’t be able to control every outbound link from your site. But this tool can be helpful in allowing you to avoid bad linking in your work on the site.

5. Webmaster World
http://www.webmasterworld.com

I’ve recommended Webmaster World before, and want to do so again today. It’s the best forum I’ve found for highly detailed news and analysis about how to prevent, and recover from, tech attacks on multiple common online publishing platforms. Browse the forums relevant to your CMS on a regular basis to stay aware of breaking threats to your website. If you need to post an emergency patch to your CMS, this is likely the place where you’ll find out about it.

6. Matt Cutts’ Blog
http://www.mattcutts.com/blog/

Cutts is one of Google’s software engineers and the go-to guy in combating Web spam. A popular speaker at Webmaster conferences, Cutts details many of the threats facing online publishers and offers guidance on how to deal with them.

7. Search Engine Land
http://searchengineland.com/

Danny Sheridan’s website offers much more than security advice; it’s a great bookmark to stay on top of many technical aspects of Web publishing, notably improving and protecting your position in search engine results.

There are no 100 percent guarantees online. You could follow all these links on a regular basis, and still end up hacked. But reading and using these resources will greatly improve the odds to your favor.

It is also choose your Web hosting partner carefully – to find someone who has a track record of protecting client websites, and with whom you can comfortably communicate, in case the day ever comes when you need help to recover from a website attack.

How to get your site into Google News

Google News’ Daniel Meredith made the trip to competitor territory to speak to a roomful of online journalists at Yahoo HQ during last week’s NewsTools 2008 conference in Sunnyvale, Calif.

Meredith explained how Google makes the decision to include a website in Google News, and what else news publishers can do to improve their websites’ performance in the view of Google’s robot army.

Why should publishers care? Google News is one of the world’s most popular news portals, “in the top five worldwide,” according to Meredith. As important than occasional presence on the Google News front page, though, is presence in Google highly popular e-mail news alerts, which draw upon, and drive traffic to, Google News-indexed websites.

These alerts don’t just drive traffic to the New York Times and CNN. News sites covering a niche area can see hundreds, if not thousands, of new daily unique visitors if their stories are included in a keyword-driven Google News e-mail alert.

Finally, “being in [Google] News does buy you credit in Web” search results, Meredith said. News publishers undermine their search engine optimization strategy by not making a request for inclusion in Google News.

And if you haven’t asked, you are not in, Meredith said. News publishers must make an explicit request for inclusion in Google News. Though Google News is published by an algorithm, the decision to include a particular website as a source in Google News is made by human beings, Meredith said.

“What do we look for?” asked Meredith. Four things, he replied:

  • Original content
  • Multiple authors
  • Proper attribution
  • Response time

    The first and third points should not be issues for any experienced journalist. But the second point would be of obvious concern to many bloggers and independent publishers. Great original content from a single talented writer is not enough to get Google’s blessing. If you want the traffic the Google News can deliver, consider forging a partnership with other writers or finding ways to elicit high-quality reader-submitted content that can add additional bylines to the front page of your site.

    On the fourth point, Meredith was referring to server response time. Google’s news bots are looking for pages that they can index swiftly, and that will load quickly for readers, too. News publishers should take frequent looks at their hosting situation, both to make sure that their servers are tuned for optimum day-to-day performance, as well as having the ability to handle a sudden traffic surge from a major breaking news event. Publishers using custom-built content management tools need to consider the added factor of code efficiency, especially code bloat, as they add and modify their system’s tools. That neat new “share this link” function might look nice, but you have to be careful that it, or some other new widget, isn’t slowing your pages’ load times.

    Once a site in in Google News, what can it do to help move its pages to the top of news search results?

    Meredith’s reply? Use a sitemap. Sitemaps are XML files that describe to a search engine robot all of the content available for indexing on a website. Think of it as a giant RSS-style feed that describes everything on your website.

    Google enables Web publishers to submit sitemaps via Google’s webmaster tools service. (If you are a news publisher and have not yet signed up on Google’s webmaster tools, do it now. It’ll be the best thing you do today to help promote your Web traffic.) Some content management systems, such as Drupal, include modules that will generate a sitemap automatically.

    “Most problems that small newspapers have with search engine optimization is that they have non-standard layouts,” Meredith said. That leaves search engine robots like Google’s struggling to differentiate headlines, updates and relevant keywords. Sitemaps eliminate such confusion, helping robots see clearly which articles are updates, as well as to extract appropriate headlines and summaries.

    Another problem facing news publishers is duplicate content. Google penalizes sites that run too many duplicates of stories from other websites, as well as too many duplicates of stories from its own site.

    The solutions? First, invest your time in original content, not just setting up more wire feeds. (See inclusion criterion number one, above.) Second, “edit more,” Meredith said. Don’t just stream out a new story with every altered keystroke. Take a moment and do a tough edit that will hold up until you have substantial new information to add to the story.

    Finally, write or install a module to your content management system that will generate search-engine friendly URLs, ones that include relevant keywords, and not strings of question marks, numbers and other characters that don’t tell outsiders anything about the content of that webpage.

  • Should Microsoft buy Yahoo?

    The big news roiling the online publishing? Microsoft’s attempt to take over Yahoo!, the latest move in the software giant’s ongoing battle with search engine leader Google.

    Let’s talk about it. What would the deal mean for the online news business? For online entrepreneurs? For the economy?

    [Sorry -- It looks like Twiigs.com, the company that hosts the poll, has eaten the results a couple times due to some server issues it's had over the weekend. So please do vote again if you see the input form below (which means that your old vote was among those eaten.]