How can google.com be used to serve malicious content?
For example gmail is on google.com, so is google drive, google transalte (I think this might be a big one), and various other services that host user content.
Diagnostic page for Google.com
11–20 of 75 posts
Re: Diagnostic page for Google.com
#12On the one hand, I feel smugly better about using another browser[1]. But how could I feel this without google (i.e. google.com/safebrowsing/diagnostic) to provide the ammunition? I'm so confused now. [1] http://www.google.com/safebrowsing/diagnostic?site=duckduckg...
Does DDG attempt to detect sites that serve malware though? Also, s/browser/search engine/.
Re: Diagnostic page for Google.com
#13Is this due to people with viruses/compromised routers going to their home screen (google) and having that redirected to some malicious page?
Some of it could actually be hosted through code.google.com
Re: Diagnostic page for Google.com
#14On the one hand, I feel smugly better about using another browser[1]. But how could I feel this without google (i.e. google.com/safebrowsing/diagnostic) to provide the ammunition? I'm so confused now. [1] http://www.google.com/safebrowsing/diagnostic?site=duckduckg...
Does DDG attempt to detect sites that serve malware though? Also, s/browser/search engine/.
As far as I know, DDG does just browser/search. By extension they shouldn't be able to do as much harm as a company that provides many more services (e.g., safebrowsing/diagnostic). [edited the following 2 sentences for readability.] For example, one area possible threat could be code.google.com. DDG doesn't have a counterpart of hosted code, so it can't possibly be a threat.
Hence, my confusion. Yes, part of me was just trying to be humorously sarcastic. But part of me really enjoys some of the innovative ways that Google leverages data. And yet, another part of my thinks that they have stepped over important privacy and security lines in other areas. Hence, I prefer DDG for the vast majority of my search needs.
Re: Diagnostic page for Google.com
#15Re: Diagnostic page for Google.com
#16On the one hand, I feel smugly better about using another browser[1]. But how could I feel this without google (i.e. google.com/safebrowsing/diagnostic) to provide the ammunition? I'm so confused now. [1] http://www.google.com/safebrowsing/diagnostic?site=duckduckg...
It says they visited 6,815,255 Google sites and 1,686 contained malware. It only visited 152 DuckDuckGo pages. It would have to visit an order of magnitude more than 152 Google pages in order to expect one of them to contain malware.
Re: Diagnostic page for Google.com
#17How can google.com be used to serve malicious content?
For example gmail is on google.com, so is google drive, google transalte (I think this might be a big one), and various other services that host user content.
And code.google.com
Someone briefly had a pointer to http://www.google.com/safebrowsing/diagnostic?site=code.goog..., which includes:
> Malicious software is hosted on 23 domain(s), including sms-bomber.googlecode.com/, gdata-issues.googlecode.com/, infojob.googlecode.com/.
Re: Diagnostic page for Google.com
#18Is this due to people with viruses/compromised routers going to their home screen (google) and having that redirected to some malicious page?
Some of it could actually be hosted through code.google.com
ah good point, though github.io does not seem to have that problem http://www.google.com/safebrowsing/diagnostic?site=github.io
Re: Diagnostic page for Google.com
#19Is it the ads? Most malware is distributed through ads. I don't think there's a risk in AdWords text based ads, but the display ads frequently include malicious software. That and download.com. I'm glad I use the ad blocker.
Re: Diagnostic page for Google.com
#20How can google.com be used to serve malicious content?
Don't forget:
sites.google.com wiki.google.com apps.google.com
This probably scanned Google's old Sites product; the equivalent of Geocities for the early '00's.