Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Help HN: Google just blocked my site as deceptive site

news.ycombinator.com

Post reply on HN
Print view View original

11–20 of 24 posts

Re: Help HN: Google just blocked my site as deceptive site

#11

Post by uploaderwin »

OJFord wrote: post #9

I'd report it as incorrect, but I can't even ignore the warning (Firefox, clicking proceed anyway just pops up an additional 'deceptive site' banner that follows me even after navigation away /shrug) - so I can't really justifiabally report it sight unseen. Where does the upload go when your customers use it on their site though? Maybe what's deceptive is that if HN shows an upload area in an iframe or whatever, and…

The upload goes to the customers AWS account or Digitalocean spaces account. We do not host any cutomer's file.

Also it always opens-up a file popup so it can't be used deceptively.

Regarding the name it's short form of 'Uploader window' like Filer Picker. Really can't do much about that.

Thanks for helping it in reporting it as incorrect.

Re: Help HN: Google just blocked my site as deceptive site

#12

Post by uploaderwin »

romland wrote: post #10

You say "All test files are deleted after 24 hours.", that implies to me that files people upload _could_ be downloaded too. If that is the case, that is where you are vulnerable. Free hosting of a file at a trusted domain is worth something. If people are not intended to be able to download their test files, check your logs, someone might have found a way around it. That's the best I can think of.

Yes you are correct they can download it too. After thinking about it for the last 4 hours that is all i can think off caused the problem. I have nothing which can be called deceptive text on any of my site otherwise.

I will probably delete files after 2 mins instead of 24 hours.

Another option is I ask for credit card details before I let them try the demo. This can get rid of letting anyone misusing the demo features.

Re: Help HN: Google just blocked my site as deceptive site

#13

Post by tmikaeld »

arkitaip wrote: post #5

Is Search Console giving any useful info? FYI your domain seems to be blacklisted by Firefox, McAfee, Sophos among others [0] [0] https://www.virustotal.com/gui/url/e75b77237f60332ef78b2399c...

The virus engines are probably listing it because they check the Google malware listings.

Re: Help HN: Google just blocked my site as deceptive site

#17

Post by uploaderwin »

_-___________-_ wrote: post #16

First and foremost, host the hosted script that you let users use on a different domain - especially if you're letting random people upload random files to your primary domain!

Yes this is 100% correct and I was thinking the same. The homepage, test storage and external script cannot share the domain. I have already started making these changes.

Re: Help HN: Google just blocked my site as deceptive site

#18

Post by Matsta »

I just had a look on Ahrefs and couldn't notice anything weird.

One thing I did notice, is that you have your jpg's inline. McAfee and other virus protection apps are completely trigger happy anytime you encode a substantial amount of "code" (yes it's an image). I would try removing the inline images and linking them and see if that makes any difference.

Re: Help HN: Google just blocked my site as deceptive site

#19

Post by uploaderwin »

Matsta wrote: post #18

I just had a look on Ahrefs and couldn't notice anything weird. One thing I did notice, is that you have your jpg's inline. McAfee and other virus protection apps are completely trigger happy anytime you encode a substantial amount of "code" (yes it's an image). I would try removing the inline images and linking them and see if that makes any difference.

Thanks for checking and help.

Yes I too believe this could be one of the cause as I've mentioned below in another comment, virustotal site says 'base64-embedded'.

Those are just svg images I've embedded in the html to reduce the number of requests. But I'm not taking chances and making them seperate files.

Re: Help HN: Google just blocked my site as deceptive site

#20

Post by ryanmcdonough »

uploaderwin wrote: post #12
romland wrote: post #10

You say "All test files are deleted after 24 hours.", that implies to me that files people upload _could_ be downloaded too. If that is the case, that is where you are vulnerable. Free hosting of a file at a trusted domain is worth something. If people are not intended to be able to download their test files, check your logs, someone might have found a way around it. That's the best I can think of.

Yes you are correct they can download it too. After thinking about it for the last 4 hours that is all i can think off caused the problem. I have nothing which can be called deceptive text on any of my site otherwise. I will probably delete files after 2 mins instead of 24 hours. Another option is I ask for credit card details before I let them try the demo. This can get rid of letting anyone misusing the demo featur…

Just as a point, I wouldn’t give you credit card details to try a demo. I don’t think many people would - hard enough to get people to give them for a trial, nevermind to try uploading a file.
Post reply on HN