My First Year Fighting Spam

This post details the author's first year on the Site Integrity Recon & Response (SI-RAR) team, focusing on combating spam and abuse. It highlights the development and iteration of real-time classification systems to address evolving threats like fake accounts (created to promote external services) and social engineering attacks (self-XSS). The post emphasizes the importance of monitoring, automation, and the need for security to be designed into products rather than being an afterthought. It also touches on the shift from self-XSS to malicious browser extensions as an attack vector.