Seven essential resources to help protect your website from technical attack

Kevin Roderick publishes the widely read and highly acclaimed (among Los Angeles-area journalists, at least) blog LA Observed. But this week, Roderick’s been living a Web journalist’s nightmare. Earlier this week, many Web browsers started blocking access to his website, following Google’s determination that LA Observed included links to sites that were distributing malware – malicious code that could infect readers’ websites with viruses and other nasty stuff.

Roderick ultimately traced the problem to ads running on his site, and took that section down while he worked with his hosting provider to purge the links. A day after clearing the site, Google cleared LA Observed, and traffic is able again to flow normally to Roderick’s site.

I don’t want to write about Roderick’s specific situation, beyond using it as a peg to remind all independent online publishers of the importance of keeping an eye on the tech side of publishing.

Tools such as Blogger and Moveable Type have allowed writing with no tech training to become popular and self-sustaining online publishers. But tech gremlins can attack anyone, and even novices need to pay attention to the threats.

In that spirit, here are seven essential resources for online publishers who don’t want to get burned:

1. Google’s Webmaster Tools
http://www.google.com/webmasters/tools/

Google drives more traffic than any other site online, so it just makes sense for you to use every tool that Google provides you to improve your website’s position in its search engine results. Google’s toolset allows you to submit and track sitemaps of your website’s content, see how Google ranks your content via a simple interface, as well as to learn of any problems that Google is having with your site, problems that might drive your site down in the Google search engine results, or cause it to be blocked altogether.

2. Google’s Safe Browsing Diagnostic Tool
http://www.google.com/safebrowsing/diagnostic?site=http://www.yoururl.com

There is no landing page for this valuable service, so you’ll have to copy and paste the URL above, substituting your URL for “www.yoururl.com”. This page allows you to see what your users will see if Google ends up blocking your page, for similar reasons that it blocked LA Observed. But if you check this page on a regular basis, you won’t have to wait for your traffic to tank, or readers to e-mail you, to discover if you have a problem. The page also will detail the problem for you, allowing you to more efficiently isolate and remove it.

3. Google’s Online Security Blog
http://googleonlinesecurity.blogspot.com/

This is where to go for an overview of website security issues, as they can affect your presence on Google. You’ll want to bookmark the blog’s post on recovering from a website hack in case you ever find your site infected by malware, or blocked because it is linking to such sites.

4. Stop Badware’s Link Clearinghouse
http://stopbadware.org/home/clearinghouse

You can prevent linking to “bad neighborhoods” online, including malware sites, by checking links through this page, before adding them to your site. Obviously, if you permit user-generated content on your website, and allow readers to post links, you won’t be able to control every outbound link from your site. But this tool can be helpful in allowing you to avoid bad linking in your work on the site.

5. Webmaster World
http://www.webmasterworld.com

I’ve recommended Webmaster World before, and want to do so again today. It’s the best forum I’ve found for highly detailed news and analysis about how to prevent, and recover from, tech attacks on multiple common online publishing platforms. Browse the forums relevant to your CMS on a regular basis to stay aware of breaking threats to your website. If you need to post an emergency patch to your CMS, this is likely the place where you’ll find out about it.

6. Matt Cutts’ Blog
http://www.mattcutts.com/blog/

Cutts is one of Google’s software engineers and the go-to guy in combating Web spam. A popular speaker at Webmaster conferences, Cutts details many of the threats facing online publishers and offers guidance on how to deal with them.

7. Search Engine Land
http://searchengineland.com/

Danny Sheridan’s website offers much more than security advice; it’s a great bookmark to stay on top of many technical aspects of Web publishing, notably improving and protecting your position in search engine results.

There are no 100 percent guarantees online. You could follow all these links on a regular basis, and still end up hacked. But reading and using these resources will greatly improve the odds to your favor.

It is also choose your Web hosting partner carefully – to find someone who has a track record of protecting client websites, and with whom you can comfortably communicate, in case the day ever comes when you need help to recover from a website attack.

The most important blog on your newspaper's website

It’s been a smoky spring here in the Los Angeles area. Last week, wildfires burned both the city’s Griffith Park (one of my favorite places on Earth, by the way) as well as the resort island of Catalina. In both incidents, I watched TV coverage, listened to radio reports and hit up news websites. But I kept finding myself coming back to the breaking news blog on latimes.com.

How many acres have burnt now? How much of the fire is contained? Where’s the worst threat at this hour? For those essential questions, which readers wanted immediate answers, the Times’ breaking news blog delivered.

Newspaper.com managers, take a lesson. If you do not have a breaking news blog ready to go on your website, get started on building one. Today. The blog is the ideal format to deliver information in a breaking news situation. There’s no reason to continue relying on traditional newspaper narrative formats online when editors could better serve their readers with the far more online-friendly blog format.

I discovered the power of breaking news blogging during the Columbine High School shootings in April 1999. At the time, I was the executive producer of the Rocky Mountain News’ website, in charge of its editorial operations. Despite the fact that the Rocky then sold more papers in the Denver metro area than any other publication, we were a small staff, as was typical at newspapers at the time, usually with only one or two online editorial employees on the clock at any given moment.

When the shooting happened, as with any major breaking news story, the demand for information was immediate. The Rocky was preparing a extra edition for that afternoon, but we couldn’t wait for those stories to clear the copy desk. So I blew up our hand-built, flat-file website home page and started using a bullet-point list to provide the latest facts and data we could find, in reverse chronological order.

I was blogging, though no one I knew had ever used that term yet. Nor did we have blogging software; I wrote our updates in HTML and FTP’ed them to our server. But I loved the format. We got updates from Rocky reporters via a helpful newsroom editor (remember back when union issues at many papers precluded reporters from producing work directly for their websites?), watched televised sheriff’s press conferences, listened to police scanners, scoured the wires, made calls to neighbors and I posted every piece of information we found, attributing it to the source where we got it and noting where it conflicted with other information that had been reported on our site or on TV.

When the paper’s extra edition stories were ready, we posted those to the site, but by then, our news blog had even more up-to-the-minute information. Without having to take the time to do a write-through whenever we had new information, we could get that information online faster. And readers did not have to wade through a write-through to find the newest facts and data.

“Using blogs to cover breaking news can be a great benefit to the reader, especially on fast-moving stories,” latimes.com editor Meredith Artley wrote in an e-mail when I asked her about the Times’ recent efforts. “With the Griffith Park and Catalina fires, the developments were coming in so quickly — percentage of the fire contained, evacuation information, anecdotes from people living the experience. In an article format, some of these developments may be lost somewhere in the 3rd, 4th, 5th paragraph of the story. With a blog, it’s crystal-clear what’s fresh.”

With blogging software now so widely available, there’s no excuse for newspaper editors not to turn to blogging when major news breaks. Nor should editors have to invent a reporting process on the fly, like I did eight years ago. Here are some steps that newspaper.com editors should take to prepare their newsrooms to publish a top-quality breaking news blog the next time a major story breaks in their community.

1) Select a blogging tool and have it ready to go.

This step might seem obvious, but there’s more to it than one might envision. Ideally, your blogging tool should support tagging or categorization, so that you can have a unique URL for each breaking news story. What happens if you have two stories that break close enough to each other that they overlap? Or if a person Googling for information about an old breaking news story finds your URL? Tagging or categorizing each post should enable you to create an unique URL for each story, rather than sending all readers to the same newspaper.com/breakingnews URL. You might not think that you’ll need this functionality now. But if you take a little extra time to build it in now, you will thank yourself later.

Part of having your tool ready to go is to decide how the blog will be linked to from your front page, as well as the rest of the site. “A reader… seemed to misunderstand that the posts were from reporters, not readers,” Artley wrote e about the Times’ fire blogs. “And there were a couple of comments from folks who seemed unpleasantly surprised to be clicking on a headline or photo and getting a blog instead of an article. So we’re considering ways to signal that better, but I don’t want to get into overlabeling the site.”

2) Identify and train your bloggers.

It’s not enough to have one or two people assigned to blog breaking news. You need to identify and train enough bloggers so that one of them will be in the building at all times. You also need to ensure that someone else can cover the bloggers’ “normal” routines, since the bloggers will be too busy during breaking news.

You’ll also need a plan for how information will get to the bloggers. Establish a central e-mail address, phone number and/or instant message account to take bulletins from staff reporters and make sure everyone in the newsroom knows them. In a breaking news situation, off-duty reporters and even those not on the metro desk often have the first reports from the scene.

Artley suggests testing your blog reporting process in a controlled environment, such as during a trial.

“We had a test drive with the Phil Spector trial blog,” she wrote. “We knew we would have reporters with Blackberries in the courtroom. We got to set it up and plan. We also tried the breaking news blog again with the immigration march downtown, and, again, we planned how that would work — who would file, who would post, who would approve comments, and who would take care of images. Of course it doesn’t all go smoothly, but if you can plan a little bit, you’ll be much more prepared for when news breaks.”

This is also the time to make an organizational decision on what sources you will report in your blog. Will you cite what TV stations or other competitors report?

3) Have a plan to backread and edit the blog.

You should not insist on posts going through the normal newspaper editing process before hitting the blog. You won’t ever beat TV, radio or other blogs that way. But someone should be assigned the task of reading posts as they go live, to immediately correct typos, misspellings or other obvious factual errors. (I found a few lingering goofs on the Times blog last week.) Don’t assume that someone in the building, or some reader, will tip you to errors. Make sure someone specific is charged with this important duty.

4) Go for broke.

Once you have this system in place, why reserve it for infrequent occasions?

A newspaper reporter at an industry seminar last fall asked me what her organization could do to improve its front page design. I told her, “Make it a breaking news blog.”

I think one of the reasons that Kevin Roderick’s enjoyed such success with his LAObserved site is that many people prefer reading a blog-style narrative to picking their way through the mess of hyperlinks that compose the typical newspaper.com home page. Roderick reads dozens of stories from local Los Angeles media each weekday and selects the best of them to summarize and link on his blog. It’s a broadcast news writing model, really. But it works.

Why not assign sharp editors to be your “anchor” on each shift through the day, blogging your paper by selecting and summarizing the best stories, as they become available? (Readers who want to drill down to other information on the site may still use the site’s navigation to find specific sections’ story archives and other features.) And in a breaking news situation, the front page blog can morph into the breaking news blog.

Either way, the readers in your community will come to see your paper’s home page as the place to go for a friendly, authoritative voice that provides the very latest news about their community. And after all, isn’t that what a newaspaper website’s home page ought to be?

Making the jump from one-man blog to community website

Over the past three years, Kevin Roderick’s LA Observed has become the go-to source for links and insight about life in the Los Angeles, California not populated by stars, agents and studio executives… or wanna-be stars, agents and studio executives. Roderick, a native Angeleno, worked as a staff writer and editor at the Los Angeles Times for two decades and writes as for Los Angeles magazine in addition to publishing LA Observed, which he started in 2003.

This month, Roderick expanded his site, adding three additional blogs and a slew of contributors, shifting LA Observed from a one-man blog to an emerging community portal. Roderick answered questions about the changes in a telephone interview with OJR.

OJR: What has changed at LA Observed, and why?

Roderick: I had done LA Observed for three years as a solo practitioner. But for the last few months, I have been trying to find a way to enlarge the footprint for LA Observed a bit, in terms of being a source of original writing, and in some cases, more news and information about Los Angeles. So what I decided to do — and it’s the first of many things that I think will be coming in the near future — to open up LA Observed to contributors who I approached and asked if they would be interested in joining the blogosphere through LA Observed. And these are, for the most part, people who had not been bloggers before. But most of them are writers of some kind, or have been journalists, or otherwise have written for public consumption. But they just hadn’t been online.

OJR: It sounds a little bit like a Huffington Post model.

Roderick: Well, in a way, it might be, with some significant differences. One is that it’s focused on Los Angeles. And it’s not about politics, primarily. And it’s not just people with known names, who are venting about something that’s on their mind, or something that’s bothering them, or a political cause that they want to advocate. I’m hoping this will be more interesting than that. And I think The Huffington Post is great, actually. And it’s a great thing that they’ve created there. But there’s hundreds of people contributing there. And I think for me, it’s just a little bit loud, in that sense. It’s hard for me to parse through it, and to get a real sense of the personality of the site.

OJR: Talk a little bit about managing these new contributors. Because there is a bit of a jump to go from a one-person publication to assuming the role of the editor managing a bunch of other writers. Now, obviously, you’ve had some experience in that in the past that I assume you’re gonna be drawing upon. But, how do you see that playing out in the blog?

Roderick: Well, first of all, it’s kind of fun to be back in the editor’s seat a little bit more directly than I have been lately. But the way I’ve set this up is, the contributors are going to mostly contribute to new blogs that are kind of operating as sidebar blogs to LA Observed. All of them will have sign-on passwords to the site, and be posting themselves. I’m not editing the content of the blogs. These are meant to be contributions from people who I trust to put up on the site unedited and unfiltered, for the most part.

OJR: What’s in it for the contributors? Are they being paid? Are they getting an ad share? Is it just for the publicity? What did you use to get them on board?

Roderick: Well, they’re not being paid. And – you know, LA Observed is primarily a personal site that is supported to a limited degree by advertising and sponsors, who paid for the expenses of keeping the site up. And that will continue to be necessary, and even more so.

I went to people and said, you know, “I have this website.” All of these contributors were regular readers of LA Observed, and I essentially offered them an outlet and a place on which to come online and kind of fly their flag, in a supportive environment where they didn’t have to start their own blog from scratch.

I’ve also promised them that there will be not only no editing, but they will also retain all rights to what they write on the website. So that if they they post something that they can turn into a magazine article or a book or whatever, go for it. It’s not my property. It’s a place for them to come on and be online, rather than it’s something that I’m creating.

OJR: Is there any worry that perhaps some of them will get particularly popular, then take off and do their own thing in competition with LA Observed?

Roderick: Well, it’s not a worry, but it’s something that I hope happens. I expect that some of the contributors will develop followings, and go off and at some point spin off, and decide to go try it fully on their own. And they’ll do that with my blessing.

I think one of the experiments is to have a very experienced business journalist, Mark Lachter, the former editor of The LA Business Journal, and a former Forbes correspondent, writing about LA business every day. Well, there are no other blogs devoted to LA business. And I think he’s bringing a lot to that already. He’s only been doing it now for three days. He’d never blogged before in his life. And he really was looking for an outlet. We had had a conversation some months ago about what he was gonna do after he left The LA Business Journal. And staking a claim online was one of the things that interested him a lot.

It wouldn’t surprise me if someday down the road he becomes so successful with what he’s doing that he wants to take it up, and become his own blog. Or even his own blog empire. Who knows? And that would be fine. And then, you know, we’ll cross that bridge when it comes to it. But that is part of the model here. These are not employees. This is a community. And community members can come and go.

OJR: About opening up the side of the community, have you given thoughts to bringing back comments, or adding discussion boards, or doing other things that might bring readers into the community as writers and publishers as well?

Roderick: I’ve given a lot of thought to it, actually. I think there will be more opportunities for reader participation than there has been up to now. As you know, I had comments for the first year, or year and a half of the website. Just got bogged down by the spam assaults that come because of the software I used, Movable Type. And also, because the community that was forming around the comments of the website was not particularly attuned to the community that was forming around reading the website. They were different groups. And it was taking an awful lot of time to manage that side of things.

So, I cut it off at some point. I guess it was about two years ago now. I still don’t think that the software filters are far enough along that – you know, you can open up full comments on the side like this, and not have to deal with a lot of spam. And I’m not too interested in that form of reader participation, as an art form. I think there’s better ways to do it, and I hope to hit on that. We may do some kind of a hybrid of a letters page, where people can send in things they want to say about what’s on LA Observed, but they’ll have to sign their name to it. Another way to do it may be to set up some kind of free posting community of invited commenters, the way that the Gawker networks have done it. Or to set up something like Romanesko does, where he posts letters from people that are kind of screened. He actually filters his a little bit more than I might, and picks and chooses the ones that he wants. Sort of in the way that a Letters to the Editor page does at a newspaper.

If I do it, I want it to be a plus.

OJR: Let’s talk a little bit about the technological side of this. How’s that going?

Roderick: Well, I keep saying that I’m hitting the outer limits of what I know, in dealing with software and things like that. But then I keep finding I’m going a little bit farther. So, this web – LA Observed and all of these sidebars are published on Movable Type, at a discount hosting service that’s located in Wisconsin. Total Choice Hosting, which I’m pretty happy with. I anticipate – you know, the website probably outgrowing both of those things. Both Movable Type and Total Choice at some point. And I’m kind of dreading that point, of having to do any kind of major conversions. But this did involve, for me, deciding whether to create these new blogs, as separate blogs, or as essentially categories of LA Observed. And the software allows for categorization and customizing of categories. I decided to go the blog route. And it also makes them a little bit more transportable, if they break off. It’ll be easier to send them on their way. It also makes it easier for the contributors to sign on. And they all have passwords, and there is a learning curve for them, in learning how to use Movable Type. So, that’s an interesting facet of this. In that I’m dealing with people who have not been bloggers in the past. And have not been posting in any form to the Internet in a way that would make them instantly comfortable with filling out a blog form on Movable Type.

OJR: How much time have you spent training yourself on blog software, and what kind of resources have you used?

Roderick: Well, I’ve been learning it as I go along. I did read a book on how to use HTML early on, so that I felt comfortable with that. My kind of favorite for that, because of its usability, is Elizabeth Castro’s HTML for the World Wide Web. The Fifth Edition is what I have. That’s been very helpful. And then there’s also a community of websites that support users of movable type. And that has been invaluable to me. You know, that’s where I learned that you can do certain things that I didn’t know you could do. In this case, I converted what was an HTML site to PHP, which I had not done before, and had been intimidated about doing before. You know? And I realized that it will open up a number of possibilities to me that are interesting and valuable, especially with the use of scripts. And perhaps even switching from static pages to dynamically-built pages might help a little bit, in some cases. But it’s allowing me to simplify the spreading out of the website’s design onto new blogs. That’s just something I wouldn’t have known how to do six months ago. So, that’s one reason that I’m doing this now, and that I’m able to do it now.

OJR: What are some of those community sites?

Roderick: Well, the one that I tend to fall back on, it’s called Learning Movable Type, by a woman named Elise Bauer, up in the Bay Area. And she has put together just a very invaluable collection of tips, tutorials, and advice on how to both build and use and modify a Movable Type blog. And she has pointers to a number of others. Frankly, the Movable Type documentation and support you get from the creators of Movable Type is not very good. You need to have somebody translating it for you. And she does a pretty good job, for me.

There’s also support forums on the Movable Type website, where I’ve in the past asked questions.

OJR: I think one of the things that so many people like about LA Observed is that it isn’t this kind of outsider’s stereotypical view of Los Angeles, but rather something that’s far more informed by a native’s outlook. We haven’t had a major, locally-owned English language newspaper in Los Angeles for the past six years. Do you think that that’s created a void that LA Observed has stepped into? Do you think LA Observed could be as successful as it is if we still did have a locally-owned English language newspaper in this town?

Roderick: Well, you know, I don’t think the geographical location of ownership matters that much to the newspapers that we have here. I mean, none of the newspapers changed their sense of what they knew about LA when the new ownership came in. They did have some changes of editors, for instance at the LA Times, and there was kind of a rethinking of local coverage for them. Some in a good way, and some in a way that thinned things out considerably. I think LA Observed is a much different animal than any of the newspapers here, obviously. But I do think it is filling some sort of a niche for people who are looking for a very locally-oriented take on the news. Who are looking for a little bit more detail and nitty-gritty about local affairs and local events than they get in the newspapers anymore these days, which are squeezed in space. You know, the newspapers are trying to serve people across the region, the 15 million people. And I can devote my intentions to a much more narrowly-drawn group.

People tell me all the time that they used LA Observed as kind of one of their guides to deciding what’s important in the news. Having a very strong Los Angeles sensibility is appealing to a lot of people in Los Angeles. And I think that is a complaint that I hear about the newspapers, and the television stations, and even the radio stations. That they don’t feel as rooted in Los Angeles as some of the blogs do.

And then there’s other blogs doing the same thing, who are also telling the story of Los Angeles, in their own way. I think you’re gonna see more and more of that. I do think that that’s a big part of the advantage that websites and blogs have over old-style media — the ability to do things in a kind of a hyper-local way. And one of the things you’re gonna see at LA Observed is some spin-off, side blogs, I’m calling them, that are going to be focused more specifically on areas of the city.

OJR: Do you think that traditional media should have been doing more of what you’re trying to do? Not just in terms of providing the hyper-local round-up, but also getting the other voices online?

Roderick: Yes. I do think they should have, and I think it will be seen as a missed opportunity by some of the other local media outlets. I mean, if you look at The LA Times, for instance, which does have a number of blogs now, on its website. But it doesn’t have many blogs devoted to the news and public affairs and politics and gossip of Los Angeles. I guess the closest thing to that now would be the School Me blog that Bob Sipchen does, which is covering very intently the attempts by Mayor Villaraigosa to take over the school system. For a while there, Mike Hiltzik blog was touching on local affairs, but it really was a national business blog that was tending toward joining the national political blogosphere.

Not to pick on The Times. The Daily News, a paper that at least fancies itself as being more attuned to the local situation because it doesn’t have foreign bureaus, and it doesn’t have people around the country – they have a number of blogs, too. But they tend to be feature-y, and they’ve put more emphasis, as does The Times, into the Hollywood space than they do into covering just the community where their readers live. And it’s curious, because that’s a complaint leveled at both newspapers. You don’t get a sense of real Los Angeles that people live in by reading The Times or The Daily News.