Working together to fight malware

Filed under: Official Google Blog — Wrote by Lees on Monday, May 19th, 2008 @ 9:17 pm

Posted by Panayiotis Mavrommatis,
Google Security Team

We recently began a series of
posts related to online security that focus on how we secure
information (with posts href="http://googleblog.blogspot.com/2008/03/how-google-keeps-your-information.html"
id="qyc5" >like href="http://googleblog.blogspot.com/2008/03/using-log-data-to-help-keep-you-safe.html"
id="kb5c" >these) and how you
can protect yourself online. Here's the latest in the series.-
Ed.

As part of this ongoing security series, we'd like to talk a
little about id="lase" >malware. The term malware, derived
from "malicious software," refers to any software
specifically designed to harm your computer or the software
it's running.

Malware can be added to your computer, with or without your
knowledge, in a number of ways — usually when you visit a website
containing malware or when you download seemingly innocent
software. It can then slow down your system, send fake emails from
your email account, steal sensitive information like credit card
numbers or passwords from your computer, and more.

The conventional wisdom was that you could avoid malware by
learning to spot sites that were created with the sole purpose of
spreading it, and by staying away from other sites that might be
risky. But href="http://googleonlinesecurity.blogspot.com/2008/02/all-your-iframe-are-point-to-us.html"
id="jddj" >recent research from Google
suggests that an increasing number of malware attacks are taking
place on sites you'd normally regard as safe or legitimate, but
have actually been compromised.

Google works closely with the href="http://googleonlinesecurity.blogspot.com/2007/11/help-us-fill-in-gaps.html"
id="kxrj" >security community to href="http://googleonlinesecurity.blogspot.com/2007/05/introducing-googles-anti-malware.html"
id="oe4q" >identify malware on the web and
then href="http://googleonlinesecurity.blogspot.com/2007/06/phishers-and-malware-authors-beware.html"
id="qn3p" >share that information more broadly.
We've set up a number of automated systems to scour our index
for potentially dangerous sites, and we href="http://www.google.com/support/bin/answer.py?answer=45449&topic=360&hl=en&sa=X&oi=malwarewarninglink&resnum=1&ct=help"
id="v9:q" >add a label to those that appear to be a vehicle for
malware. If you're searching on Google and click on a link that
we've flagged, a warning page will appear before you move
forward.

We also href="http://www.google.com/support/webmasters/bin/answer.py?answer=45432"
id="am_8" >notify webmasters if we
discover that a site is no longer secure and provide a method for
webmasters that href="http://googlewebmastercentral.blogspot.com/2008/04/my-sites-been-hacked-now-what.html"
id="ubgi" >clean up their sites to
href="http://googlewebmastercentral.blogspot.com/2007/08/malware-reviews-via-webmaster-tools.html"
id="bkdz" >request a review. And
starting soon, we'll be providing more detail on sites that
appear to be spreading malware, so users have a better sense of why
we have flagged a given site and webmasters can more easily
identify and correct issues on their sites.

All this stems directly from our security philosophy: We believe
that if we all work together to identify threats and stamp them
out, we can make the web a safer place for everyone. Of course, we
can't catch everything, so our users play a

href="http://www.google.com/contact/security.html"
id="kp-b" >crucial part
of this effort too. Below are a few tips
that can help you reduce your chances of being affected by
malware:

Use anti-virus
software. Most anti-virus software is specifically designed
to find and remove harmful software on your computer. Be sure you
have anti-virus software installed on your computer (you can get a
free trial through href="http://pack.google.com/intl/en/pack_installer.html?hl=en&gl=us"
id="a:vx" >Google Pack if you don't),
keep it current, and use it to run frequent full-system
checks.

Make sure your operating
system and browser are up to date. Attackers typically
target vulnerabilities in your href="http://en.wikipedia.org/wiki/Operating_system" id="neqc"
>operating system (OS) and your browser
to install malware on your computer. OS and browser providers
frequently release updates to close those vulnerabilities. Enable
automatic updates for both your browser and your OS, and check for
alerts to ensure you have the latest and greatest
protection.

Be careful about what you
download. While Google and everyone else in the online
community is working hard to identify harmful sites, new sources of
malware are emerging all the time. Whenever you're prompted to
download an email attachment, install a plug-in, or download an
unfamiliar piece of software, take a moment to think it through.
You won't always be able to identify a risky download, but if
you practice some reasonable caution, you'll be able to reduce
that risk.

If you come across a potentially dangerous site that hasn't
already been flagged, please href="http://www.google.com/safebrowsing/report_badware/" >report
it. To learn more about malware and how to protect yourself,
check out StopBadware.org's href="http://www.stopbadware.org/home/help" id="b5qc"
>help page.

href="http://feeds.feedburner.com/~f/blogspot/MKuf?a=mBxPUZG" > border="0" />

height="1" width="1" />

Tags: , , , , , , ,

Using log data to help keep you safe

Filed under: Official Google Blog — Wrote by Lees on Sunday, May 4th, 2008 @ 2:29 am

Posted by Niels Provos, Google Security
Team

We recently began two new series
of posts. The first, which explains how we harness data for our
users, started with href="http://googleblog.blogspot.com/2008/03/why-data-matters.html"
id="wkxh" >this post. The second, focusing on how we secure
information and how users can protect themselves online, style="font-style: italic;"
href="http://googleblog.blogspot.com/2008/03/how-google-keeps-your-information.html"
id="b3rt" >began here. This
post is the second installment in both series.- Ed.

We sometimes get questions on what Google does with server log
data, which registers how users are interacting with our services.
We take great care in protecting this data, and while we've
talked previously about href="http://googleblog.blogspot.com/2008/03/why-data-matters.html"
id="gjr1" >some of the ways it can be
useful, something we haven't covered yet are the ways it can
help us make Google products safer for our users.

While the Internet on the whole is a safe place, and most of us
will never fall victim to an attack, there are more than a few
threats out there, and href="http://googleblog.blogspot.com/2008/03/how-google-keeps-your-information.html"
id="syc9" >we do everything we
can to help you stay a step ahead of them. Any information we
can gather on how attacks are launched and propagated helps us do
so.

That's where server log data comes in. We analyze logs for
anomalies or other clues that might suggest malware or phishing
attacks in our search results, attacks on our products and
services, and other threats to our users. And because we have a
reasonably significant data sample, with logs stretching back
several months, we're able to perform aggregate, long-term
analyses that can uncover new security threats, provide greater
understanding of how previous threats impacted our users, and help
us ensure that our threat detection and prevention measures are
properly tuned.

We can't share too much detail (we need to be careful not to
provide too many clues on what we look for), but we can use
historical examples to give you a better idea of how this kind of
data can be useful. One good example is the href="http://www.citi.umich.edu/u/provos/papers/search_worms.pdf"
id="ujjv" >Santy search worm
(PDF), which first appeared in late 2004. Santy used combinations
of search terms on Google to identify and then infect vulnerable
web servers. Once a web server was infected, it became part of a href="http://en.wikipedia.org/wiki/Botnet" id="or.e"
>botnet and started searching Google for more
vulnerable servers. Spreading in this way, Santy quickly infected
thousands and thousands of web servers across the Internet.

As soon as Google recognized the attack, we began developing a
series of tools to automatically generate " href="http://en.wikipedia.org/wiki/Regular_expression" >regular
expressions" that could identify potential Santy queries
and then block them from accessing Google.com or flag them for
further attention. But because regular expressions like these can
sometimes snag legitimate user queries too, we designed the tools
so they'd test new expressions in our server log databases
first, in order to determine how each one would affect actual user
queries. If it turned out that a regular expression affected too
many legitimate user queries, the tools would automatically adjust
the expression, analyze its performance against the log data again,
and then repeat the process as many times as necessary.

In this instance, having access to a good sample of log data meant
we were able to refine one of our automated security processes, and
the result was a more effective resolution of the problem. In other
instances, the data has proven useful in minimizing certain
security threats, or in preventing others completely. In the end,
what this means is that whenever you use Google search, or Google
Apps, or any of our other services, your interactions with those
products helps us learn more about security threats that could
impact your online experience. And the better the data we have, the
more effectively we can protect all our users.

Tags: , , , , , , ,

Two books that reading recently

Filed under: SEO Optimization — Wrote by Lees on Thursday, December 20th, 2007 @ 1:49 am

In inn of net submit a written statement to a higher authority, ChaptersOrdered two books, go yesterday evening post office is taken. Be bought in the hypostatic bookshop of same home company, it is cost price $87.98 $93.26 is after adding GST, and it is cheap to be ordered from the net a lot of. Cost $61.54 to add money in all, economic more than 34% .

Two authors add up to Professional Search Engine Optimization With PHP a written book, one is programmer, one is expert of search engine sale, such book, it is to theory has practice certainly.

Search Engine Visibility is the second edition this, published in September today. In
Amazon
The introduction that go up is so write:

Search Engine Visibility Is About Designing, writing, and Creating A Web Site Primarily For A Site's Visitors, and helping Them Find What They Are Searching For Via The Major Search engines, directories, and Industry-related Sites. This Book Teaches developers, designers, programmers, and Online Marketers What pitfalls To Avoid From The Beginning So They Can Provide Their clients With More Effective Site Designs. It Includes Up-to-date information On New Developments Such As Blogs, video And Podcasts, web Applications And More.

Make the best of time to learn, seeing other experts is how to be treatedSearch engine to optimize, if why handle those technical issues, and solve a problem, they are the contradiction that how balance SEO to use a sex easily with the website.

Tags: , , , ,

Recently a few topics about Google

Filed under: SEO Optimization — Wrote by Lees on Friday, December 14th, 2007 @ 12:37 am

Appeared in the tiring-room of Google AdSense recently a few new things. One is Site Authentication. Adsense-site-authentication.gif The setting of this thing, the spider that can allow Google AdSense is OK the webpage that the ability after capture is landed to those need can see. Another is the AdSense that I had told
The domain name protects list
. Adsense-site-whitelist.gif Look at present the user that this domain name protects list to just be aimed at chinese mainland. Because only Chinese account just has this function, and only Chinese just has this specification in help file. In the Webmaster Tools tiring-room of Google, added newly
Report Paid Links
tool. Google-webmasters-tools.gif This part basically copes with those to raise the stationmaster of PageRank through buying a link. Last news, the closest Google and Ebay, because of the competitive issue of CheckOut and Paypal, mutual become enemies, Clutch rises.

Tags: , , , ,

Saying thank you with pictures

Filed under: Official Google Blog — Wrote by Lees on Tuesday, December 4th, 2007 @ 10:13 pm

Posted by Beth Campbell, Product
Marketing Manager

I recently got married and wanted to send out thank-you notes
together with hundreds of photos our guests took using the cameras
we put on the tables. href="http://picasa.google.com/" >Picasa made the process super
easy.

In Picasa, select the folder with your pictures. Click the
"Gift CD" button and follow the instructions to set your
picture size and CD name. To add a nice effect, check the
"Include Slideshow" box — this adds a slideshow
presentation that plays when the CD is launched (way more fun than
a boring list of files). For recipients who might enjoy saving the
photos and viewing them later, check the box to include a copy of
Picasa on the CD (it's only 3.9MB). Click "Burn Disc"
and Picasa creates the CD.

The finishing touch: a customized photo CD cover. Select a picture
and click the "Print" button. Here's what it looks
like:
onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}"
href="http://googleblog.blogspot.com/uploaded_images/cdcover-712292.GIF" >
style="float:left; margin:0 10px 10px 0;cursor:pointer; cursor:hand;"
src="http://googleblog.blogspot.com/uploaded_images/cdcover-771317.GIF"
border="0" alt="" />
In the top menu, go to to Tools > Options > Printing, select
CD Label Size and click OK. Set CD Label as your layout size and
print.

You're done — and now I'm done with my thank-you
"work." I'm happy to report the photo CDs were a big
hit.

Tags: , , , , , , ,

Why does Google remember information about searches?

Filed under: Official Google Blog — Wrote by Lees on Sunday, December 2nd, 2007 @ 10:55 pm

Posted by Peter Fleischer, Global
Privacy Counsel

We recently http://googleblog.blogspot.com/2007/03/taking-steps-to-further-improve-our.html”>
announced a new policy to anonymize our server logs after 18–24
months. We’re the only leading search company to have taken this
step publicly. We believe it’s an important part of our commitment
to respect user privacy while balancing a number of important
factors.

In developing this policy, we spoke with various privacy advocates,
regulators and others about how long they think the period should
be. There is a wide spectrum of views on this – some think data
should be preserved for longer, others think it should be
anonymized almost immediately. We spent a great deal of time
sorting this out and thought we’d explain some of the things that
prompted us to decide on 18-24 months.

Three factors were critical. One was maintaining our ability to
continue to improve the quality of our search services. Another was
to protect our systems and our users from fraud and abuse. The
third was complying—and anticipating compliance—with possible data
retention requirements. Here’s a bit more about each of
these:

Improve our services:
Search companies like Google are constantly trying to improve the
quality of their search services. Analyzing logs data is an
important tool to help our engineers refine search quality and
build helpful new services. Take the example of Google Spell
Checker. Google’s spell checking software automatically looks at
your query and checks to see if you are using the most common
version of a word’s spelling. If it calculates that you’re likely
to generate more relevant search results with an alternative
spelling, it will ask “Did you mean: (more common spelling)?” We
can offer this service by looking at spelling corrections that
people do or do not click on. Similarly, with logs, we can improve
our search results: if we know that people are clicking on the #1
result we’re doing something right, and if they’re hitting next
page or reformulating their query, we’re doing something wrong. The
ability of a search company to continue to improve its services is
essential, and represents a normal and expected use of such
data.

Maintain security and prevent
fraud and abuse: It is standard among Internet companies to
retain server logs with IP addresses as one of an array of tools to
protect the system from security attacks. For example, our
computers can analyze logging patterns in order to identify,
investigate and defend against malicious access and exploitation
attempts. Data protection laws around the world require Internet
companies to maintain adequate security measures to protect the
personal data of their users. Immediate deletion of IP addresses
from our logs would make our systems more vulnerable to security
attacks, putting the personal data of our users at greater risk.
Historical logs information can also be a useful tool to help us
detect and prevent phishing, scripting attacks, and spam, including
query click spam and ads click spam.

Comply with legal obligations
to retain data: Search companies like Google are also
subject to laws that sometimes conflict with data protection
regulations, like data retention for law enforcement purposes. For
example, Google may be subject to the EU Data Retention Directive,
which was passed last year, in the wake of the Madrid and London
terrorist bombings, to help law enforcement in the investigation
and prosecution of “serious crime”. The Directive requires all EU
Member States to pass data retention laws by 2009 with retention
for periods between 6 and 24 months. Since these laws do not yet
exist, and are only now being http://www.epic.org/privacy/intl/data_retention.html”>proposed
and debated, it is too early to know the final retention time
periods, the jurisdictional impact, and the scope of applicability.
It's therefore too early to state whether such laws would apply
to particular Google services, and if so, which ones. In the U.S.,
the Department of Justice and others have similarly called for http://www.epic.org/privacy/intl/data_retention.html”>24-month
data retention laws.

At the same time, regulators in other parts of governments have
argued for shorter retention periods, reflecting the conflicts in
every country between privacy and data protection objectives on the
one hand, and law enforcement objectives on the other. Companies
like Google are trying to be responsible corporate citizens, and
sometimes we are told to do different things by different
government entities, or to follow conflicting legal obligations.
It's hard enough to get different government entities to talk
to each other inside one country. When you multiply this by all the
countries where Google must comply with the laws, the potential
conflicts are enormous. Nonetheless, Google is committed to
providing its users around the world with one consistent high level
of data protection.

It’s also worth reiterating that we do not ask our users for their
names, address, or phone numbers to use most of our services. For
those who want to see what their logs history looks like, we offer
transparent access via a Google Account to their own personal https://www.google.com/accounts/ServiceLogin?hl=en&continue=http://www.google.com/history/?zx=FhAUmYIBL0U&nui=1&ltmpl=reauth&service=hist&srr=1″>
Web History.

Finally, we maintain rigorous internal controls of our logs
database. We look forward to an ongoing discussion with privacy
stakeholders around the world as we pursue a common goal of
improving privacy protections for everyone on the Internet.

Tags: , , , , , , ,

Code of Yahoo mailbox chaos settles way

Filed under: Yahoo Search — Wrote by Lees on Monday, November 26th, 2007 @ 11:38 pm

Author: Customer service of Yahoo China mailbox

Hear recently all around a few users of the friend of mailbox of United States of a few use Yahoo and search log speak of, the Chinese mail that mailbox gets became random code indescribably. This can be to make a person tricky really. We teach everybody method of a jury here, can solve this problem temporarily.

After entry Yahoo mailbox, click mailbox Logo on the right side of ” my account ” link, input a password again next, click ” user information ” on the side ” editor ” pushbutton, alter the language subsequently for ” Chinese ” . Mailbox is returned again after saving.

Tags: , , , , , , ,

Copyright © 2007 Google Adsense College.
Powered by GoogleSchool. All Rights Reserved.