7

Stack Overflow "give users the benefit of a non-nofollow link in their profile (when they achieve 2k reputation)". Anything less would "open up a world of potential linkspam exploits" — Jeff Atwood

But... I was playing around with the Developer Story, and realised that the "Traditional view" gives me a dofollow (non-nofollow) link to my personal site, even though I only have 353 rep on Stack Overflow.

Traditional Developer Story showing dofollow link to personal site

What's to stop some low-ranking unscrupulous individual from spamming Stack Exchange with lots of links to their traditional view in order to (indirectly) pass on as much juicy PageRank as possible to their personal site?

Uh, hypothetically, of course.

4
  • 4
    Seems like ALL the links in both developer story views do not apply the rel="noreferrer" attribute, including links to companies, recommended readings, project links, personal website, etc.. Maybe the spammers already know this, e.g.: 1, 2, 3, 4, etc. Apr 14, 2020 at 2:06
  • 2
    Yes, spammers already know this. CVs have been a major abuse vector for spam for quite some time now. I had discussed this with Shog9, and was trying to work with him to plug up some of these holes, but then, you know, things changed. This is a quick, simple, obvious fix. Apr 14, 2020 at 3:43
  • I see two potential solutions: 1) clamp down on what's allowed in the developer story and make liberal use of nofollow, noreferrer, etc., particularly for low rep users; or 2) give everyone full control over their own developer story, but mark links to it as nofollow (essentially treating CVs as an external link, albeit hosted by Stack Exchange).
    – anjsimmo
    Apr 14, 2020 at 22:42
  • Looking at this now. Yes, dev story has been an avenue for abuse and we do have prevention mechanisms in place (some inspired from prior discussions with Shog) but it looks like this was overlooked
    – Dean Ward
    Apr 15, 2020 at 11:26

1 Answer 1

1

Thanks for the report, I've made changes to the traditional view so that links are rendered consistently with the timeline view, change is going out to production now

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .