Live data from Hacker News

Ask HN: Google Chrome heuristic warnings pose threat to our business

news.ycombinator.com

21–30 of 85 posts

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#21
post #3

Hmm that sucks. All I can suggest is you systematically remove content from the page until the error stops - this way perhaps you can identify the offending content (or combination of content which aggregates to an "offence")

There is no offending content here. We are not a SaaS company and we dont host content. We provide shrink ware software to other companies which they use to host content.

The person you are responding to is not talking about user-uploaded content.

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#22
post #15

Earlier quoted context omitted.

Ah, we did have a feature sorta-kinda like that too... if you had your own domain you login on our webUI, enter in your own domain and if no other user had it, you'd get it. Then, you add a CNAME record pointing to us and we'd do certain things when we received the request depending on settings the customer provided during the domain-name setup. I think we used the Referrer in the request-headers. So I could point po…

We are not a SaaS or PaaS business. The software itself is hosted by the end customer in thier infrastructure. The warning appears even in local IP/debug page.

Have you tried deleting things from your page till you work out what causes the warning? Just start with a static copy of you page, and gradually delete elements till you find the culprit. It shouldn't take long to go through through the elements of the page and work it out if this is some sort of heuristic triggered by some element on your page and not based on the domain.

Another thing it could be is if you fetch any assets at all from your domain, and the domain is blacklisted, that causes the warning regardless of the page where it is hosted.

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#23

i'm not seeing the phishing warning when visiting the url from the screenshot using chrome v29.0.1547.0 dev-m. maybe you caught a malware on your computer. did you try from different machines?

No warning on 28.0.1500.63 m and 30.0.1552.0 canary either.

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#24
post #19
post #7

Earlier quoted context omitted.

That failing, get money for them blocking a competitor. before downvoting, take the time to explain how this would be different from old good Google suing Microsoft just for not making their product use Google easier than it already allowed.

this is HN, you can't get downvoted:)

I'm assuming some people are downvoting you to help disprove your point, but to be clear, once you've reached a karma threshold you can downvote.

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#26

i'm not seeing the phishing warning when visiting the url from the screenshot using chrome v29.0.1547.0 dev-m. maybe you caught a malware on your computer. did you try from different machines?

We have checked with one of the latest beta builds. In that build it didn't show the warning. It happens with the live chrome version. The issue is much more complex.

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#27
post #19
post #7

Earlier quoted context omitted.

That failing, get money for them blocking a competitor. before downvoting, take the time to explain how this would be different from old good Google suing Microsoft just for not making their product use Google easier than it already allowed.

this is HN, you can't get downvoted:)

[deleted]

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#29

You may also be interested in this article: https://medium.com/surveillance-state/32ba2b38c219

Yeap. That summarizes our issue. The next step for us is to hire PR and go public. We are spending 1500$ per month on google adwords now. May be use that money to get some legal help. In a physical world it is a clear public defamation case.

Get a lawyer. Send a demand letter to Google's corporate counsel that they stop falsely identifying your software as dangerous. Fax, FedEx, and email it. If they don't respond in 24 hours, have your lawyer file an emergency injunction in federal court.

Google's failure to respond to issues like this is appalling, and it's probably going to take a lawsuit and public embarrassment to get them to stop being evil.

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#30
post #8

Hey there, I actually worked for a "competitor" of yours at one time in my career. We had a very similar problem, turned out that one of our users shared(probably unknowingly) a file containing malware and probably posted it to their twitter or facebook(we had that feature built-in at the time). This URL was caught by a very popular anti-virus company, which posted it on their site. I guess the software phones-home t…

Hi, Our software is little different. It is a self-hosted software. It is hosted by our customers under different domain names in their infrastructure. So it is not the same domain or URL. For Example: Customer 1: fileshare.abcplumbing.com Customer 2: dataanywhere.peterlawfirm.com Thats the real problem here. It affects our customer installations under different domains. To some extent, we are fine if google is block…

Is it possible that you have a security hole, and malware authors have started actively taking advantage of it? If Google recognized that, your page could be a good signature for malware that they haven't detected yet, and you could get automatically blocked because of it.

This is, of course, just a random guess to throw into your brainstorm.

Post reply on HN