Live data from Hacker News

Year one: progress in the fight against Unwanted Software

googleonlinesecurity.blogspot.com

11–20 of 45 posts

Re: Year one: progress in the fight against Unwanted Software

#11
Thank you, for your efforts, but there's still a long way to go.

I occasionally need to tell non-technical users to install WinSCP. Assume someone told you to download the software from the following page: http://i.imgur.com/1HoyMWz.png Where is the ad, and where is the download link?

It's better than last time I looked, since the ad is no longer a big green button labelled "download", but it is still misleading.

Re: Year one: progress in the fight against Unwanted Software

#12
Being on the false positive end of this system, it's incredibly frustrating having my site repeatedly flagged and not being able to do anything about it. There doesn't appear to be any way to contact a human except through the "Search Console" where the UI doesn't tell me what it thinks the problem is (http://i.imgur.com/LWrBINe.png), and Google's safe browsing list is the only thing that thinks there's a problem (100% clean on virustotal).

Re: Year one: progress in the fight against Unwanted Software

#13

About time. Based on malware cleanup work I've done in people's homes and asking how they got to them (unscientific, I know), Google AdWords seems like the primary method of malware distribution. Google has gone out of their way to make AdWords look more and more like a normal search result, and particularly among seniors, it's common to expect that first link is legitimate. It usually isn't.

They need to go back to being quite clear about what are ads and what aren't.

Re: Year one: progress in the fight against Unwanted Software

#14
I've been on some websites that have had the unwanted software warnings, only to find the site admins posting on the forums saying that the site is safe. They even give instructions on how to turn off the unwanted software warnings in Chrome (which in turn turns off /all/ of Chrome's red security pages).

I think it would be more helpful if the warning page at least described what Google detected. As it stands, if people can be socially engineered into turning off warnings because they don't believe them, then it's failed as a security product to a certain degree.

Re: Year one: progress in the fight against Unwanted Software

#15

How about all the crapware that is installed along with Android on most mobile devices these days? Any plans to do something about that?

That's not under Google's control, it's under the OEM's or (in the US) the carrier. A phone bought directly from Google (the Nexus line, Google Play edition, etc) doesn't have crapware of any kind unless you extend the definition to any app you don't personally use.

Re: Year one: progress in the fight against Unwanted Software

#16
post #12

Being on the false positive end of this system, it's incredibly frustrating having my site repeatedly flagged and not being able to do anything about it. There doesn't appear to be any way to contact a human except through the "Search Console" where the UI doesn't tell me what it thinks the problem is ( http://i.imgur.com/LWrBINe.png ), and Google's safe browsing list is the only thing that thinks there's a problem (…

Ditto here.

Ended up banging head against the wall for nearly a month, submitting review request after review request only to discover that the damn request submission form in WMT console was broken and was failing silently. Fucking hell. If you take on responsibility of (mis)labeling other people work as dangerous crapware, you should probably test the hell out of false positive submission mechanism, shouldn't you? If it weren't for another person discovering and sharing this on WMT Google group, god knows we might've been still wondering why G is so damn incompetent.

To add to the insult, a formal promoted "answer" from a resident "expert" of the WMT group was to the tune of "let me google that for you, you imbecile". So, it was a fascinating experience all around.

The lack of clear way of communicating with Google directly on this sort of matter was absolutely infuriating.

Re: Year one: progress in the fight against Unwanted Software

#17
post #8

>Here are a few specific examples [shows a few screenshots of things that would never happen with an ad blocker]

Not only could ad injectors not work, they probably wouldn't have been installed in the first place because the ad blocker would block any links to them. Not sure if that was your point; if so, I agree.

Re: Year one: progress in the fight against Unwanted Software

#18
post #16
post #12

Being on the false positive end of this system, it's incredibly frustrating having my site repeatedly flagged and not being able to do anything about it. There doesn't appear to be any way to contact a human except through the "Search Console" where the UI doesn't tell me what it thinks the problem is ( http://i.imgur.com/LWrBINe.png ), and Google's safe browsing list is the only thing that thinks there's a problem (…

Ditto here. Ended up banging head against the wall for nearly a month, submitting review request after review request only to discover that the damn request submission form in WMT console was broken and was failing silently . Fucking hell. If you take on responsibility of (mis)labeling other people work as dangerous crapware, you should probably test the hell out of false positive submission mechanism, shouldn't you?…

It seems the most reliable way to talk to a human at Google (if you don't already know one working there), is to complain on twitter or your blog or similar.

Re: Year one: progress in the fight against Unwanted Software

#19
post #13

About time. Based on malware cleanup work I've done in people's homes and asking how they got to them (unscientific, I know), Google AdWords seems like the primary method of malware distribution. Google has gone out of their way to make AdWords look more and more like a normal search result, and particularly among seniors, it's common to expect that first link is legitimate. It usually isn't.

They need to go back to being quite clear about what are ads and what aren't.

The problem is that then noone would click on the ads any more

Re: Year one: progress in the fight against Unwanted Software

#20

>> We reduced the number of UwS warnings that users see via AdWords by 95%, compared to last year. Even prior to last year, less than 1% of UwS downloads were due to AdWords. That 95% drop is great! That 1% number must still be quite a large number though, ~1% of the ads they show must be well into the millions?

It says "less than 1% of UwS downloads were due to AdWords.", not "less than 1% of AdWords shown where UwS". What they're saying is: <1% of those who download UwS get there by clicking on an AdWords ad.
Post reply on HN