{"id":312,"date":"2008-04-19T08:49:27","date_gmt":"2008-04-19T13:49:27","guid":{"rendered":"http:\/\/crschmidt.net\/blog\/?p=312"},"modified":"2008-04-19T08:49:27","modified_gmt":"2008-04-19T13:49:27","slug":"why-my-blog-is-dangerous","status":"publish","type":"post","link":"https:\/\/crschmidt.net\/blog\/archives\/312\/why-my-blog-is-dangerous\/","title":{"rendered":"Why My Blog Is Dangerous"},"content":{"rendered":"<p>So, a couple people have asked me why Google thinks that my site may harm your computer. <\/p>\n<p>On Wednesday, I received an email from &#8220;Google<a href=\"http:\/\/78.90.14.123\/wp\/\"><\/a><a href=\"http:\/\/www.videnov.com\/\"><img decoding=\"async\" src=\"http:\/\/www.videnov.com\/images\/mebeli.jpg\" alt=\"mebeli\" \/><\/a><img decoding=\"async\" src=\"http:\/\/78.90.14.123\/coaching.gif\" alt=\"coaching\" \/> Search Quality&#8221;:<\/p>\n<blockquote><p>We recently discovered that some of your pages can cause users to be infected with malicious software. We have begun showing a warning page to users who visit these pages by clicking a search result on Google.com.<\/p><\/blockquote>\n<p>I looked through, and sure enough, the links they offered were indeed &#8216;infected&#8217;: I&#8217;ve always used WordPress despite my knowledge of the fact that it has security exploits more often than I get around to fixing them (though I do try to keep up). They had has a small iframe included, which claimed to be &#8216;stats tracking&#8217;: Instead, there was Javascript included which, presumably, was malicious.<\/p>\n<p>To the best of my knowledge, I solved this problem on Wednesday night, by removing the mal-links that were pointed out, and patching the security holes I could find fixes to in WordPress. (I just upgraded to WordPress 2.5; In the past, upgrading has been painful, but it wasn&#8217;t so bad this time, and there are not yet any known security holes for 2.5 that I&#8217;m aware of.) <\/p>\n<p>All in all, not a bad thing: Google emailed me, I fixed the problem, everyone wins. Except&#8230;<\/p>\n<p>Following Google&#8217;s FAQs, I went to Webmaster Tools, signed up, verified my site, went to their tools&#8230;<\/p>\n<p>And in the site management tools, found no such link as they described. Great.<\/p>\n<p>At the time, I assumed only Google was using stopbadware: I&#8217;ve since discovered that other things are using it, so I&#8217;ve requested reconsideration there. <\/p>\n<p>Still, Google now tells users that my site may be dangerous, despite the fact that it no longer is, and there appears to be no tool in the website management &#8216;tools&#8217; panel to have them check it out again. Stretches the definition of &#8216;Do No Evil&#8217; a bit&#8230; (<b>Edit:<\/b> Okay, not really, but it always works when you really want to get a response out of Google to just tell them they&#8217;re being evil: People get defensive and help you out ;))<\/p>\n<p>In any case, my web site should be safe. Sorry that people have been confused by the problem.<\/p>\n<p><b><a href=\"http:\/\/www.videnov.com\/\"><img decoding=\"async\" src=\"http:\/\/www.videnov.com\/images\/mebeli.jpg\" alt=\"mebeli\" \/><\/a>Edit:<\/b> JohnMu in comments pointed out why I was having a problem: Since crschmidt.net\/blog\/ was the only thing listed as &#8216;infected&#8217;, I had to sign up and verify for crschmidt.net\/blog\/ *seperately* from crschmidt.net. Certainly not exactly intuitive, but doing so allowed me to request a review of my site, so hopefully soon people will be able to view my site again in FF3, and won&#8217;t be caught out by Google&#8217;s warning (assuming I got all my malware off).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>So, a couple people have asked me why Google thinks that my site may harm your computer. On Wednesday, I received an email from &#8220;Google Search Quality&#8221;: We recently discovered that some of your pages can cause users to be infected with malicious software. We have begun showing a warning page to users who visit [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-312","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/crschmidt.net\/blog\/wp-json\/wp\/v2\/posts\/312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crschmidt.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crschmidt.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crschmidt.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crschmidt.net\/blog\/wp-json\/wp\/v2\/comments?post=312"}],"version-history":[{"count":0,"href":"https:\/\/crschmidt.net\/blog\/wp-json\/wp\/v2\/posts\/312\/revisions"}],"wp:attachment":[{"href":"https:\/\/crschmidt.net\/blog\/wp-json\/wp\/v2\/media?parent=312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crschmidt.net\/blog\/wp-json\/wp\/v2\/categories?post=312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crschmidt.net\/blog\/wp-json\/wp\/v2\/tags?post=312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}