Forum Moderators: Robert Charlton & goodroi

Message Too Old, No Replies

Google To Identify Malware Sites In Search Results

         

encyclo

10:37 am on Aug 7, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



From: CNET news.com [news.com.com]

Google has started warning people when search results could potentially lead them to malicious code. The search giant is using data from the Stop Badware Coalition to flag sites that are potentially host to malicious software. (...) People who attempt to go to a Web site that has been identified as risky by the coalition are taken to a warning page.

jomaxx

11:56 pm on Aug 8, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Cookies are not spyware (despite my Ad-Aware reports to the contrary). Why don't we worry about "slippery slope" scenarios if and when they happen? For now the only negative I can see is that they didn't do this several years ago, when the average PC was far more vulnerable to drive-by software installs than today.

P.S. commanderW's post raises an interesting question: Should Google bring up warning messages all the time, or only when the searcher is using an OS/browser which is genuinely at risk from the specific malware being flagged?

commanderW

2:46 am on Aug 9, 2006 (gmt 0)

10+ Year Member



Okay then, i think i, an OS X user, for instance, should be informed because even if a virus, trojan, spyware etc. can't work on my system, anything i can download can be burned onto disk, etc. & transferred to a windows user where it can work it's mischief.In regard to seciurity, I get the reminder to accept responsibility for the integrity of other operating systems along w/ mine, from OS X manual writers all the time.

Powdork

6:37 am on Aug 9, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I guarantee you that once this is put in place someone is going to try to demand the same for websites w/ ' offensive' content, etc. etc ad infinitum.
There already is an offensive content filter, and offensive content here may not be the same as offensive content elsewhere.
Could it be that this will be something that is chosen or unchosen in the preferences?

BeeDeeDubbleU

8:10 am on Aug 9, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



CommanderW I am only stating what I feel about this.

Their standards can change like the wind... ", & then turn to more political concerns, & thus censorship. I guarantee you that once this is put in place someone is going to try to demand the same for websites w/ ' offensive' content, etc. etc ad infinitum.

This is not censorship but censorship is not always a bad thing. For example, if you feel really strongly about it you should not be happy using Webmasterworld, which is openly moderated (or censored). That has not prevented it from being accepted as the yardstick forum for webmasters.

Also, as Powdork rightly points out, Google already offers their offensive content filter, which I am sure also gets it wrong on occasion. Google allow you to turn the offensive content filter on or off just as they are are offering you the option of visiting these websites.

Censorship is what Google are doing to their results in China. You have the choice, the Chinese don't.

if search engines take it upon themselves to warn of, & perhaps eventually ban websites based on the content that the user sees & has access to, then everyone is going to jump on the bandwagon & we'll all be buried w/all kinds of these warnings.

Just like I am buried in malicious spam and attempts to install malware on my PC? I spent the best part of a couple of weeks last month getting rid of malware from my PC and as a self-employed person it cost me a lot of money to do. I have no sympathy (or concerns) for those who engage in these activities.

The text of the proposed warning just does not read well. to my limited knowledge, simply visiting a site does not install or cause anything to be downloaded onto a computer.

I know you qualified this but you should remember that just about everything you see on a website is running on your computer. The website content is downloaded to your computer along with anything else the owners have chosen to code in.

Any activity like this is commendable since it will raise awareness amongst the general public. As more of them become aware these activities will be less profitable.

Quadrille

9:26 am on Aug 9, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Great move, long overdue.

How will it work for us? through the toolbar? Will the 'malware fans' be able to turn it off?

Does anyone really believe that this would be done if the software couldn't tell the difference between scum and cookies?

You can bet Google's lawyers got to screen this long before it even got to testing.

And the press release I read said it would WARN - you'd make the decision:

ME: visits site with concealed download
GOOGLE: Hey, you, this site may contain a download. Didja know? Not sayin it's bad, just sayin you may wanna check. Or not?
ME: Go away, Big G, I lurve scams, frauds, malware and all such. Gimme more!
GOOGLE: Sure, baby, just tellin ya! Your choice!

And if it stops ANY instant messenger services, deliberately or accidentally, that's a bonus ;)

commanderW

10:04 am on Aug 9, 2006 (gmt 0)

10+ Year Member



Hey again. - I look at this page & i see that Powdork has a very positive & proactive approach. - "something that is chosen & unchosen in the preferences". So hey, it's not so bad, i just turn the warning off! then i go back to Jomaxx post & my suggestion that everyone should get warnings since the code is universally transmissible wether it effects their OS or not, & i have to turn around here & say, well if i turn off the warnings for websites that foist malware onto surfers just because i hate having to click on an extra link to get onto them, what's BeeDeeDubbleU going to be saying about me while he's reinstalling his operating system?

Quadrille

10:21 am on Aug 9, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Commander: We can already control cookies; IE warns us about activex (if we choose to); many toolbars and browsers stop pop-ups, or at least warn us. And you can even kill instant messenger spam.

What's so bad about this? If it's legal to slip scumware into a download, buried on page 15 of the user agreement (And it is), then surely it's just as legal to say "are you sure you want this?".

Users have civil rights, as well as scumware merchants :)

commanderW

10:22 am on Aug 9, 2006 (gmt 0)

10+ Year Member



Whoops - you ruined my delivery Quadrille! your post ( 9:26) wasn't visible when i started writing mine & submitted it (10:04). Did it really take 1/2 an hour for one paragraph? Did i black out? Weird. Anyway, there's alot of thinkin' to be done & i hope the thinking is real good. I just want the thinkers to keep in mind that there really is a slippery slope here, even though i have to admit, it takes a backseat to a sabotaged computer.

commanderW

10:37 am on Aug 9, 2006 (gmt 0)

10+ Year Member



Wow, i am slow. But i'm not afraid of cookies, only pointing out that scumware is an ambiguous category, & that flagging sites should be done w/ some sort of consideration for the webmaster, who might be a victim too ( DNS cache poisoning, wich i 1st heard of on this webmastersworld in (fact, & all that type of fancy stuff.), & that maybe, as an after thought perhaps, it can be done without me having to click on a bunch of extra links. Jomaxx says leave "slippery slope" scenarios till they manifest. Okay. all i'm doing is carping anyway. I should shut up & fgo igure out what kind of anti-viral software i'm going to use now that i've lost virex.

Quadrille

11:22 am on Aug 9, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I do agree - webmasters may not be 'guilty', and I'd support a mechanism that informs them.

For example, on a couple of my oldest sites, I still have stats code from an external service; I didn't realise until last month that the b***** were using it to launch pop-ups on my sites!

I'm a trusting soul - I'd even 'upgraded' the code when the company changed owners - I should have gone with my instincts and deleted it! (Nostalgia 3 Commonsense Nil)

I'm sure there's many thousands of people 'innocently' foisting pop-ups on their visitors in that way - but I'd still support pop-up blockers 110%!

simey

11:28 am on Aug 9, 2006 (gmt 0)

10+ Year Member



Weird Thought:

Will things like this lead to even FEWER people taking active steps to protect their computer (and themselves)?

"I don't have to worry, if theres anything bad out there, google will tell me about it"

This 41 message thread spans 2 pages: 41