Google blocking all FastSpring stores • Hacker News Board

Re: Google blocking all FastSpring stores

#11

Post by fastspring » Tue, Mar 06, 2012, 7:19 AM UTC

Unfortunately one of our marketing servers was exploited (our store servers are completely separate, not even in the same data centers) which caused a Google Badware flag. We immediately cleaned the server and submitted it for review, Google just informed us that the site is clean and the badware warnings are being removed. They said it will take some time for the change to propagate, but we expect everything to be normal again shortly. We'll be working on changes to ensure there's never a repeat. Just to reiterate, there was no problem with our store servers or SpringBoard/Order Pages; our e-commerce sites were not hacked and there was no data breach of any kind.

Thank you to everyone for your patience and understanding during this temporary challenge.

Re: Google blocking all FastSpring stores

#12

Post by richardw » Tue, Mar 06, 2012, 7:26 AM UTC

scrod wrote: post #5

Don't worry, this problem is easily solved by moving to Google Checkout!

I'd have to move countries to do that. I can pay Google just fine, but they can't seem to figure out how to pay me. Fastspring has, for years.

Re: Google blocking all FastSpring stores

#13

Post by scrod » Tue, Mar 06, 2012, 8:00 AM UTC

richardw wrote: post #12

scrod wrote: post #5

Don't worry, this problem is easily solved by moving to Google Checkout!

I'd have to move countries to do that. I can pay Google just fine, but they can't seem to figure out how to pay me. Fastspring has, for years.

I sincerely hope you realized that my suggestion was entirely facetious.

Re: Google blocking all FastSpring stores

#14

Post by shubber » Tue, Mar 06, 2012, 8:58 AM UTC

kevinburke wrote: post #3

FastSpring should submit a reconsideration request in Webmaster Tools showing that they've cleaned up the problems. Then the warnings will go away. It's not a good sign that an online checkout store is getting hacked, period.

Maybe they're built on Rails?

Re: Google blocking all FastSpring stores

#15

Post by mise » Tue, Mar 06, 2012, 9:55 AM UTC

On a tangent: FastSpring rocks. I've ditched 2Checkout.com in favour of them. Their email support replies in minutes (it seems including during off-hours). They abstract away subscription calculations (when will that member expire??) that I found a pain with 2Checkout.

Re: Google blocking all FastSpring stores

#16

Post by retube » Tue, Mar 06, 2012, 11:14 AM UTC

Can someone explain how malicious code can be installed without a users permission? Is it possible do it without a user clicking something? By literally just loading the page?

Re: Google blocking all FastSpring stores

#17

Post by devicenull » Tue, Mar 06, 2012, 1:51 PM UTC

retube wrote: post #16

Can someone explain how malicious code can be installed without a users permission? Is it possible do it without a user clicking something? By literally just loading the page?

An exploit in the browser/flash/pdf reader/etc. Page loads, exploit loads, computer is compromised.

Re: Google blocking all FastSpring stores

#18

Post by mvelie » Tue, Mar 06, 2012, 2:51 PM UTC

It seems like maybe customer sites should use a different domain than corporate data in order to keep things like this from affecting clients.

Re: Google blocking all FastSpring stores

#19

Post by Timshel » Wed, Mar 07, 2012, 9:29 AM UTC

Joakal wrote: post #7

Google.com even thinks some part of Google.com had some suspicious activity: http://www.google.com/safebrowsing/diagnostic?site=google.co... Yahoo's even worst: http://www.google.com/safebrowsing/diagnostic?site=yahoo.com The only search engine not been partially suspicious: http://www.google.com/safebrowsing/diagnostic?site=bing.com

duckduckgo report is clean but only five pages tested : http://www.google.com/safebrowsing/diagnostic?site=duckduckg...