Remove any Site From Google (even if you don't control it)

Post by VMG » Wed, Jul 20, 2011, 8:32 AM UTC

_mvuc wrote: post #46

ashconnor wrote: post #32

Earlier quoted context omitted.

The article delivers. Why is this linkbait?

How does the article deliver? I don't see, in the comments on his blog or here, any evidence that this has been independently reproduced. He's got a description, and some "screenshots" and, oh, Google seems to already have fixed it. How... convenient? I'm not saying it's fake, but I don't see any reason to believe it. Am I missing something?

Post by tetha » Wed, Jul 20, 2011, 8:53 AM UTC

ImperatorLunae wrote: post #62

otherwise although it is a loophole I am pretty sure it is illegal. It would seem that this is illegal, but I've never heard of a law protecting one's right to be listed in a search engine. Perhaps, if this process requires you to be the owner, it qualifies as fraud?

Post by RexRollman » Wed, Jul 20, 2011, 10:06 AM UTC

sidman wrote: post #58

spooneybarger wrote: post #44

Earlier quoted context omitted.

My favorite has always been the google apps problems that tell you to contact support to get a resolution but you can only contact support if you are a paying customer. support is not google's strong suit.

I am a google apps paying customer and it took them 4 weeks to get my domain issue corrected ! In that time i wasnt able to get mail so i had to change my mail to use godaddy until they got back to me. When they finally did they said it was because my dns records were pointing to godaddy ! After 1 week of not getting mails i would say an alternative is required. I actually had a feeling that this would happen :) I re…

Post by 25thhour » Wed, Jul 20, 2011, 10:58 AM UTC

michaelfairley wrote: post #15

wccrawford wrote: post #5

I think it's sad that he had to resort to publicly releasing this exploit because he couldn't find a way to contact Google about it. In the past, when I've had problems, I couldn't contact them either. They've done a great job at making sure there's no human contacts available. You have to post something in a public forum and hope they'll contact you. (They won't.)

I'm not sure how he was unable to find their security@google.com email address. Searches like "Google security" and "Google report vulnerability" have http://www.google.com/about/corporate/company/security.html (which has a prominent section on reporting security issues) as their first result.

Post by dave1010uk » Wed, Jul 20, 2011, 11:29 AM UTC

ssclafani wrote: post #8

wccrawford wrote: post #5

I think it's sad that he had to resort to publicly releasing this exploit because he couldn't find a way to contact Google about it. In the past, when I've had problems, I couldn't contact them either. They've done a great job at making sure there's no human contacts available. You have to post something in a public forum and hope they'll contact you. (They won't.)

Sending an email to security@google.com will result in a quick response. As part of their bug bounty program Google would have paid $1,000 for this bug if not more.