Reblogged from missing-e
~ Are you getting spam submissions in your inbox? ~
Quite a few people have been getting spam submission posts in their inbox. Some users have wondered if Missing e causes this.
To be clear, this problem has nothing to do with Missing e!
Unfortunately, this appears to be a problem with Tumblr, itself. At the moment, there is not a whole lot you can do about it.
~ Why is it a problem? ~
Imagine you get a submission in your inbox that looks like it is from yourself! See the image at the top of this post? That’s an example of what it could look like when someone who is not logged into Tumblr submits to your blog!
So, this malicious person can submit spam posts to your blog (which will wait in your inbox), and make it seem like it is from yourself. This can be annoying or even detrimental to those users who allow submissions to their Tumblr blogs!
~ How do they do that? ~
Unfortunately, it is too easy. When an anonymous person not logged into Tumblr goes to your
/submitpage (assuming you activated it in your blog settings), they are given the opportunity to post whatever they want.
To submit the post, they must enter an e-mail address and a name. Tumblr doesn’t validate the e-mail or the name, so anyone can impersonate anyone else by typing in their username as the name and any e-mail address (whether they own it or not). I’ve even been getting reports of spam submissions with a person’s username and staff@tumblr.com as the e-mail address!
When the submitted post appears in your inbox, all you see is the name that the person typed in (possibly your username) and whatever e-mail address they decided to use. In addition, submissions from people who are not logged in always appear with the Tumblr avatar of the blog the submission was made to (your blog).
~ What can you do about it? ~
Not much.
Currently, the only way to prevent these kinds of spam submissions is to turn off submission for your blog in your blog’s settings! There is no option to only allow submissions from logged-in users. It appears to be all-or-nothing.
Hopefully, Tumblr will be able to address this spam problem in a timely manner.
