Example email to a hacked site

 

Beyond clear-cut blackhat webspam, the second-biggest category of spam that Google deals with is hacked sites. The most common reaction we hear from webmasters is “The problem is with the Google search. There is nothing wrong with our website.” That’s a real quote from an email one site owner recently sent us. Sadly, it turns out that the site is almost always really hacked.

The single best piece of advice I can give to prevent website hacking is “keep your web server software up-to-date and fully patched.” That prevention is much better than the hassle of cleaning up a hack. Here’s an example email I just sent to a site owner with the identifying details removed:

Hi xxxxxxx, I’m the head of Google’s webspam team. Unfortunately, example.com really has been hacked by people trying to sell pills. I’m attaching an image to show the page that we’re seeing.

We don’t have the resources to give full 1:1 help to every hacked website (thousands of websites get hacked every day–we’d spend all day trying to help websites clean up instead of doing our regular work), so you’ll have to consult with the tech person for your website. However, we do provide advice and resources to help clean up hacked websites, for example
http://support.google.com/webmasters/bin/answer.py?hl=en&answer=163634
https://sites.google.com/site/webmasterhelpforum/en/faq-malware-and-hacked-sites
http://googlewebmastercentral.blogspot.com/2008/04/my-sites-been-hacked-now-what.html
http://googlewebmastercentral.blogspot.com/2007/09/quick-security-checklist-for-webmasters.html
http://googlewebmastercentral.blogspot.com/2009/02/best-practices-against-hacking.html

We also provide additional assistance for hacked sites in our webmaster support forum at https://groups.google.com/a/googleproductforums.com/forum/#!forum/webmasters . I hope that helps.

Regards,
Matt Cutts

P.S. If you visit a page like http://www.example.com/deep-url-path/ and don’t see the pill links, that means the hackers are being extra-sneaky and only showing the spammy pill links to Google. We provide a free tool for that situation as well. It’s called “Fetch as Googlebot” and it lets you send Google to your website and will show you exactly what we see. I would recommend this blog post http://googlewebmastercentral.blogspot.com/2009/11/generic-cialis-on-my-website-i-think-my.html describing how to use that tool, because your situation looks quite similar.

Anyway, just a reminder for site owners to keep their web server software up-to-date, because hacked sites are a real pain. Most Google searchers and even website owners don’t think about hacked sites much, but on our side have to spend a fair amount of effort writing classifiers to catch this illegal activity, helping the victims of hacked sites, adapting when the hackers change their techniques, etc.

View post:
Example email to a hacked site

Share/Save/Bookmark

Halloween costume: stickman from xkcd

 

For Halloween this year I asked people on Google+ what I should be for Halloween, and someone suggested going as the blackhat stick man from xkcd. You know, this guy:

Black hat stick man from xkcd

That sounded like a good challenge. I finished the costume and taped a video, but unfortunately I didn’t have enough time to get the video to the quality level that I wanted. Here’s the video:

A couple quick things: 1) I know the video is cheesy and lo-fi, but that’s what I was going for. 2) With a little more time and more work on the video (e.g. better lighting, turning off automatic brightness on the video camera, a little more time spent on the greenscreen key) I think it could have been pretty great. But sometimes you run out of time, and October was a busy month. :)

Maybe I’ll write a bit more about the costume and the video later. Happy Halloween everyone!

Go here to read the rest:
Halloween costume: stickman from xkcd

Share/Save/Bookmark

Finding the best cell phone carrier

 

Okay, someone tell me if this device exists (or build it!). I want a device where I can pay $10-15 to get a gadget in the mail. The gadget would sit in my pocket for a week wherever I go. The device would record cell phone signal strength for each of the four major U.S. carriers every few seconds. After a week or so, the device would deliver the verdict on which cell phone carrier would have the strongest signal for me. Then I could mail the device back so someone else could use it — sort of a Netflix-like model to temporarily borrow this device.

At any point, I could go to a web page to view a map of where I’d been. The page would show a “heat map” of signal strength for each carrier or frequency band. Maybe I could also slice/dice by time or see the total number of readings in each location. I’m pretty sure you could rig this up out of 2-3 cell phones running Android in the worst case.

So far, I’ve found:

Android

- RF Signal Tracker is a nice app to collect and map signal strength data. It looks like it can upload to OpenCellID, which is a project to create an open database of cell IDs (numbers that correspond to cells).
- Antennas is a pretty cool free app to show you nearby antennas and signal strength. It can even export some data in KML for use with Google Maps/Earth, but it doesn’t seem to make a heat map that could be easily grokked.
- Sensorly has a free Android app, but they seem to want you to pay to zoom in closer than city level. I’m willing to do that, but didn’t see the for-pay addon in the Android Market.

iPhone

- I also found an iPhone app called Signals that will continuously collect signal data and upload it.
- AT&T offers an iPhone app called Mark the Spot to report dropped calls, no coverage, etc. I have to admit that I don’t understand why this is manual though. Personally, I’d want my phone to ping my carrier with its location every time the phone dropped a call.

Web

- SignalMap is a website to (manually!) submit the number of bars for a location. It doesn’t appear to have any mobile app to back it up. Likewise, Dead Cell Zones and Got Reception? appear to rely on manual reports. I don’t think manual reports is the best way to tackle cell phone coverage maps though — you really want an app for this.
- http://www.cellreception.com/ has the standard manual reports data, but also will map the location of cell phone towers based on the location of cell phone towers registered with the FCC.
- Root Wireless powers the cell phone signal strength maps that CNET uses, but I didn’t see any apps I could download or install on a phone. I registered to be a beta tester a long time ago, but no one ever contacted me.

That’s what I could find. Do you know of any good Android (or iPhone) programs to collect, map, or upload cell phone strength measurements? If so, let me know in the comments.

Credit:
Finding the best cell phone carrier

Share/Save/Bookmark

Blog to Book?

 

I recently went looking for some software to make a blog into a book. Here’s what I found:

- Lulu will take PDF files for a book. Blogbooker.com will try to create a PDF from a blog. Unfortunately, my blog made BlogBooker choke (I have 991 posts from my blog) — even when I excluded comments.

- Blurb.com will try to create a book from a blog, but it only supports blogs hosted on WordPress.com, not other WordPress blogs. That will help some people who want to print their blog into a book, but not everyone.

- I had the best luck with FastPencil. In order to reduce the size of your exported blog, you’ll first want to go to your comments section, click on the “spam” link and clear out any spam comments by selecting all the spam comments and clicking “Empty Spam”. Then you can export your WordPress blog (from the Dashboard, click Tools, then Export) as an XML file that you can download to your computer. From there, FastPencil lets you upload the .xml file and then select which blog posts to include in the book. You can also filter by time, which I had to do. Even my blog posts (no comments) from the last year and a half still made a 350+ page book, and FastPencil choked on turning my entire blog into a book.

FastPencil did a few things well. Included images were imported, and some formatting such as bold made it into the PDF. But other formatting, such as code formatting and newlines/spacing between paragraphs didn’t make it. Embedded content such as videos or polls were likewise empty. Trying to import my entire blog also didn’t work. But all in all, I was impressed with FastPencil. They also have nice collaboration tools (e.g. you can designate editors, reviewers, co-authors, and project managers to help in writing/polishing the content). The site also works through your web browser instead of as a downloadable program, which appealed to me. If you’re used to WordPress, FastPencil won’t be too much of a change.

It’s still not a point-and-click affair to make a nice looking coffee table book out of a blog, but it’s getting closer. Right now, the “make a book” niche feels like the early days of recordable CDs. Back then, CD-R discs were expensive enough that I would spend time to make sure that I used all the free space on the CD. Eventually prices dropped so much that you didn’t feel bad about burning a half-empty or not-perfectly-polished CD.

If you’ve tried other blog-to-book services or websites, let me know your experiences in the comments.

Credit:
Blog to Book?

Share/Save/Bookmark

Keep an eye on changing pages

 

Google just launched a nice feature on Google Reader: the ability to keep an eye on pages for changes. This works even if the page doesn’t have its own RSS feed. This sort of thing is very handy. You could use it to spot new things on a privacy policy page or watch for changes in the executives page at another search engine.

Check out the blog post, but it’s easy to use: just add any url to Google Reader.

Original post:
Keep an eye on changing pages

Share/Save/Bookmark

Services
Web Hosting Dedicated Servers Forex Investment Web Design Voice over IP
Products
Clothing & Fashion Mobile Phones Electronics eBooks & Info Music & Movies