Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by kapuru | Hacker News Reader

Full thread

kapuru·

I think I'm in love.

I just recently switch from GA to Gauges, because the referral spam and bloat was annoying me.

I'm definitely going to use this on my next project. Simple and beautiful.

Thanks for sharing!

View on HN

I'm still running google analytics but I don't look at it anymore, the spam is unbearable and I don't have time to figure out how to create filters. Its not my problem to figure out either. I'm really excited for Mirrorshades. Keep it simple.

I'm developing a simple web analytics also (it's strange to see Mirrorshades here since I started developing something like it some weeks ago) and I want to know about referral spam: Mirrorshades per se doesn't have any better spam filtering than Google Analytics, right? The gain from switching to it is just because spammers still don't know how to spam Mirrorshades, or am I wrong?

Spammers are already doing what they do. I have rudimentary measures in place, but additional data will enable a more sophisticated response. I use the service myself and find spam to be crazy-making. So... ;)

How are they doing what they do? How could a spammer get to know Mirrorshades protocol to send a false referrer report (which is not the Referer header) in an AJAX request?

At least some of them appear to use a more general-purpose method than that. They actually load pages and execute scripts with document.referrer and the Referrer header faked-up. Though it's presumably more resource-intensive, it has the benefit of working for a wide variety of analytics setups, both hosted and server-side.

Oh, right, they just got document.referrer, I had forgotten about that.

What if the analytics server actually parsed the referring page to see if there's a real link there and only confirm the referrer after that? Isn't there a third party service that checks these things?

Reply on news.ycombinator.com