Google updates its list of potentially harmful sites both manually and automatically with data from StopBadware.org
When Google went crazy on Saturday, most people thought the impossible had happened! Could Google be possibly hacked?
Two days and a slightly controversial Google blog post later, we now know what exactly happened. For those of you who are unaware about this fiasco, on Saturday, for almost an hour, Google search results came with a warning message saying "This site may harm your computer." Even Google's own services were labeled as risky sites - come to think of it, Google had actually blacklisted the entire Internet!
Some initial reports had also mentioned the possibility of a Google hack when entering the address "google.com" did not give the usual Google page but some strange webpage that said "SoGoSearch". As expected, Google did come up with an official explanation. This too raked up a minor controversy, and was then modified.
According to Google, the glitch was the result of a "human" error. Google periodically updates its list of potentially harmful sites using data compiled from a non-profit organization called StopBadware.org. The list, according to Google, is updated both manually and automatically. It was during one of these updates that the popular search engine labeled all sites as being potentially unsafe. This happened when, accidentally, the URL value of "/" was checked and classified as being potentially unsafe. However, the "/" value actually extends to all URLs, resulting in all the websites being blacklisted. The situation continued for almost an hour till the problem was sorted out.
The Google blog post also apologized to everyone affected by the glitch and also to those site owners whose safe sites were labeled as harmful. This is apart from the promise to have more "robust" checks in place to prevent similar issues in the future.
This horrible mess has caused numerous problems on my PC. THANKS A LOT GOOGLE! I thought you could be trusted. Now I've got to get my PC cleaned to clear out the crummy AntiVirus 2009 that your search results downloaded even though I hit Cancel numerous times.
Most companies enjoy ?security? insofar as they haven?t been targeted, or had an employee make a human error with catastrophic exposure. Price Waterhouse Cooper and Carnegie-Mellon?s CyLab have recent surveys that show the senior executive class to be, basically, clueless regarding IT risk and its tie to overall enterprise (business) risk. Data breaches and thefts are due to a lagging business culture ? absent new eCulture, breaches will, and continue to, increase. For example: Microsoft patched for the worm affecting Heartland 4 months ago. As CIO, I?m constantly seeking things that work, in hopes that good ideas make their way back to me - check your local library: A book that is required reading is "I.T. WARS: Managing the Business-Technology Weave in the New Millennium." It also helps outside agencies understand your values and practices.
The author, David Scott, has an interview that is a great exposure: www.businessforum.com/DScott_02.html -
The book came to us as a tip from an intern who attended a course at University of Wisconsin, where the book is an MBA text. It has helped us to understand that, while various systems of security are important, no system can overcome laxity, ignorance, or deliberate intent to harm. Necessary is a sustained culture and awareness; an efficient prism through which every activity is viewed from a security perspective prior to action.
In the realm of risk, unmanaged possibilities become probabilities ? read the book BEFORE you suffer a bad outcome ? or propagate one.
There is always chance of human mistakes. To avoid these, there should always be formal double check procedure (Application Testing) before rolling out any application to production and if the site is like Google, most popular and trusted search engine, this kind of mistakes can led to credibility loss and hence importance of testing increases.
Normally when changes are to be made in a corporate setting, there are multiple levels of testing and approval, especially for changes from an external party. This process is called Change management. Are big companies exempt?
ha ha...it happened to me too.I first thought it was a browser problem.I tried like three other browsers but the problem persisted.I really thought that something had happened.Anyway Google did a great job by recovering ASAP.
Any programmer can make a mistake. But catching and correcting it in one hour seems great. Microsoft can take ten years and two versions to correct a mistake, and make ten others in the process.
google was hacked a few time prior mostly defacements but still nothing is unhackable
I do believe it may be the ultimate hit for this isreal / palastine conflict