Bambibot: Evolution

Wow, twammers. I'm almost impressed. Nearly a 1:1 following:followed ratio, and some 1700+ followers at that. Believable Twitter updates, AND a blog backing the profile! Though bad grammar, capitalization and syntax are found throughout the text, it's sadly believable as the product of a child of the SMS generation.

Of course, turning to the blog, it's a spamblog/link farm. The supposed owner of the blog's pictures link to an adult dating site. And yet again, the screen name, "MichelleLoli," doesn't exactly match the alleged actual name, "Stefi Tossie."

Here's an account I followed for a while, where the person/people behind the account actually seem to interact with the other people the account follows. No actual conversations, but occasional, relevant, one-liner @ replies to something you said. Maybe the woman behind it really does Tweet, and she's just a really busy pornstar/dominatrix ... or maybe it's a half-hearted effort to pump traffic to the pornstar's site by some cheapo marketing firm or seospammers. Bambibot, or no?

New Twist on Twam

Noticing a scary twitterspam trend these past couple weeks: bambibots and other spambots on Twitter are getting a lot more subtle. A few months back, you saw them spewing out random bits of text obviously taken from other sources, but those bits were often fragments, and the following:followed ratio was hundreds:1 or worse. Account names were still pretty obviously simple enumerations or iterations.

This week, I'm seeing spambot accounts with reasonable following ratios, believable names, and bits of text that would almost make sense as entire thoughts or sentences, if you didn't understand that a word like "uni" for "school" or "college" wouldn't be used by a girl in Louisiana, particularly not in the middle of August.

http://twitter.com/clairemcdaniel2

Big giveaway: name reads "Kayla," Ms. 'Claire.' Ooops!

The linkspam volume has died down. You could almost believe it's a real account, not just a broadcast mouthpiece for porn, SEO and MLM links.

One giveaway the nasty spammers seem to fail to be dealing with: the source parameter. Without an officially registered app, the source parameter describing the app that a tweet was sent from is going to be displayed as "From API." Not "From Web." Not "From Tweetdeck" or "From Seesmic" -- "From API."

With OAuth, there's no reason for legitimate users to be calling in over Basic Auth anymore -- no reason a legit user should be displaying "From API" -- certainly not with any regularity.

Developers: register your app, use the freely available OAuth libraries that are proliferating, and deal with the occasional OAuth downtime.