Live data from Hacker News

Remove any Site From Google (even if you don't control it)

jamesbreckenridge.co.uk

31–40 of 102 posts

Re: Remove any Site From Google (even if you don't control it)

#31
post #12

Earlier quoted context omitted.

[deleted]

The story goes: The huge printing presses of a major Chicago newspaper began malfunctioning on the Saturday before Christmas, putting all the revenue for advertising that was to appear in the Sunday paper in jeopardy. None of the technicians could track down the problem. Finally, a frantic call was made to the retired printer who had worked with these presses for over 40 years. “We’ll pay anything; just come in and f…

More versions of the story and many others: http://www.snopes.com/business/genius/where.asp

Re: Remove any Site From Google (even if you don't control it)

#32
post #3

Despite it being "fixed" not long after the blog post went live, I wonder how long/how many people knew about this bug. Seems like it would be a great trick for SEO (build page to certain PR/remove opponents ranking above you)

What's a great trick for SEO is this sensationalist linkbait article.

The article delivers. Why is this linkbait?

Re: Remove any Site From Google (even if you don't control it)

#33

Earlier quoted context omitted.

It's not a back door, it's an abuse of an existing approach. Google could weight the process in one of two ways: 1. in favour of the complaint-maker. 2. in favour of the website-owner. If they favour the complainant, then website deletion is presumed to go ahead. If the webmaster, then it is presumed to be held up. Google chose a compromise: the complaint is acted on, after a delay. The webmaster gets notified throug…

I think you're misunderstanding the article. Google webmaster tools allows the website owner to request links to their own sites be removed. The poster has discovered that this form can be used to request any url be removed, and Google will think it's being submitted by the owner of that URL. This has nothing to do with users complaining about a URL.

In which case, I think I have too.

Re: Remove any Site From Google (even if you don't control it)

#34
post #24

This bug could have been exploited for millions of dollars. Imagine giving a mafia boss control over the heartbeat of every rival. One blackhat SEO could have dominated any number of lucrative keywords. If this bug has existed for a long time it's quite possible some guy is sailing around on a yacht that this bug paid for. It's such a blindingly obvious bug that I really do wonder whether this might have been a backd…

> This bug could have been exploited for millions of dollars.

Quite possibly exploited for non-savvy website owners. Savvy owners would be checking their ranking regularly and noticing it disappear one day.

Anyone who ranks highly for lucrative keywords and does not check their ranking is asking to lose it, whether ethically or otherwise.

So I don't think it would have been exploited for the millions you think, but possibly a good bit of money.

Re: Remove any Site From Google (even if you don't control it)

#35
post #22

Earlier quoted context omitted.

I think the point is that it's a basic dev and QA fail not to check for this, especially with people of the caliber that Google is supposed to recruit.

Process always falls down at some point, it's why we have bugs in the first place. The point of view that "obvious bugs should never happen" is pretty obviously broken, you just try to make them as rare as humanly possible. Besides, simple looking things from the outside can be maddeningly complex from the inside - for all we know this could be related to an obscure bug in their test framework marking it as passed wh…

Well said!

Re: Remove any Site From Google (even if you don't control it)

#37

Imagine if LulzSec found this first

Personally, I would be more concerned if someone with malicious intent and the ability to keep silent about what they have done had found & exploited this. [0]

Advertise: remove your competitor from Google's search results for a day! If I didn't think it was illegal, I'd probably pay for that, were I in such a situation.

[0] If, of course, it even existed in the first place. It seems plausible enough to me, even if I think it unlikely.

Re: Remove any Site From Google (even if you don't control it)

#39

Imagine if LulzSec found this first

Personally, I would be more concerned if someone with malicious intent and the ability to keep silent about what they have done had found & exploited this. [0] Advertise: remove your competitor from Google's search results for a day! If I didn't think it was illegal, I'd probably pay for that, were I in such a situation. [0] If, of course, it even existed in the first place. It seems plausible enough to me, even if I…

Eh, ok it would be more concerning. But Lulzsec would have made quite a spectacle out of it.

Re: Remove any Site From Google (even if you don't control it)

#40

Earlier quoted context omitted.

This is a pretty amateurish mistake, actually, and I'm shocked that it was in production at Google. Proper authorization checks are web programming 101.

If you make a checklist of security practices the QA testers should look for, they'd see and check off "proper authorization checks", as they were done on other fields of the same page. If you can't imagine a professional making this mistake, your mental image of an engineer is not realistic. Humans are not that perfect, and this mistake does not make everyone that reviewed this code an amateur.

Well, people are down voting me, but everyone ripped the developers of Diaspora apart for basically the same exact flaw in an early alpha release of their system. The Google fanboyism seems to be running strong here.
Post reply on HN