4 ms·
Google Chrome is detecting malware on The Verge
- w1ntermute 14y agoI hope this doesn't set back the launch of Polygon. We've already been waiting for months, and according to Press Reset (their making-of documentary for the site), it's supposed to launch in October.
- thedz 14y agoIt won't affect Polygon
- ChemicalScum 14y agoI got malware warning on Google Reader today. I wonder if this is related.
- StavrosK 14y agoI just got one on YouTube, weird...
- Dystopian 14y agoFYI: SBNation is the main property of VOX Media that owns The Verge. Something nasty must've gotten onto their CDN, but it wasn't necessarily from The Verge - since they operate a significant amount of websites - it's just that The Verge was using their parent company's resources.
- mh- 14y agohttp://twitter.com/sbnation/status/247317732503191554 http://twitter.com/sbnation/status/247317732503191554
- deleted 14y ago[deleted]
- MatthewPhillips 14y agoWhat can a site Owner do in this situation? Does Google provide information on why a site is flagged?
- creativityhurts 14y agoNot really. I had a few websites that ran on Wordpress and got "infected" because of some vulnerabilities in a plugin. I had to manually remove the malware code - usually it's pretty easy to find - and go through Google website verification https://support.google.com/webmasters/bin/answer.py?hl=en&answer=35179 https://support.google.com/webmasters/bin/answer.py?hl=en...
- Achshar 14y agoYou can submit the site for review in google webmastertools but i think that is only for serps removal. Also AFAIK Chrome takes malware data from google's severs so webmsatertools seems to be the place to go.
- besttechie 14y agoI wrote this a while back after having Google flag my site as malicious. http://www.besttechie.com/2011/09/19/how-to-fix-site-google-contains-malware/ http://www.besttechie.com/2011/09/19/how-to-fix-site-google-...
- Ironlink 14y agoThe Safe Browsing diagnostic page is your best bet when this happens. http://safebrowsing.clients.google.com/safebrowsing/diagnostic?client=Firefox&hl=en-US&site=http://cdn0.sbnation.com/ http://safebrowsing.clients.google.com/safebrowsing/diagnost... Edit: Firefox provides these links in the form of a button labeled "Why was this page blocked?"
- denzil_correa 14y agoAlready posted earlier http://news.ycombinator.com/item?id=4528963 http://news.ycombinator.com/item?id=4528963
- superchink 14y agoWhy would you link me to that? There is no discussion there that is of any value above what's in this thread (there are no comments). Please don't do that; I realize it was only a couple seconds of my life wasted (plus the 30 seconds to write this comment), but I would really appreciate it if this didn't become a trend.
- denzil_correa 14y agoSorry wouldn't do that in the future if that's so disturbing.
- deleted 14y ago[deleted]
- superchink 14y agoThank you! Also, just in case: I didn't mean to be a dick about it, so I'm sorry if it came across that way…
- jamesbritt 14y agoI much prefer that if someone posts a dupe story that people go and comment on the original submission. I appreciate it when people provide links to such previous submissions. Better that than the trend of people posting duplicate content.
- superchink 14y agoI generally agree with you. However, in this case there were already several comments on this submission, but none on the other (original) submission. In this case, as I stated, there was no value being added by linking. And with that said, I think I'm done with this meta-discussion. Thanks for playing…
- lukezim 14y agoThis is Luke Zimmermann from VOX Media, the parent company of The Verge and SB Nation. We've requested a formal review with Google after going to extreme steps to pull our advertising content to both do a thorough review and error on the side of caution that there wasn't anything malicious being inadvertently served up. At this time we're doing everything we can to get this on Google's radar and get it sorted out. We're continuing to monitor the situation as well and do everything in our power to make sure none of our readers and users are at any risk.
- chrismeller 14y agoUnless you routinely serve up javascript from domains like 'dustym' on port 8888, then you apparently haven't done anything yet - it's still being included on www.theverge.com right now.
- dustym 14y agoedit: thanks for the heads up, that was not the issue at hand.
- buro9 14y agoYou could get TheVerge unblocked right now: Move your stylesheets and other static files to a different CDN (not the sbnation domain). If TheVerge can take it... just refer to the local addresses. Shove a Varnish instance in front to help if you fear for the web servers.
- chewmieser 14y agoIf it helps or anything, this is what Chrome is reporting specifically to me: https://img.skitch.com/20120916-erdbdjn5w9dqp4rr8feu7f4ygm.jpg https://img.skitch.com/20120916-erdbdjn5w9dqp4rr8feu7f4ygm.j... Might just be because they're on sbnation, but there ya go.
- Matt_Cutts 14y agoDefinitely check for any unusual included content and then request a malware review. I emailed the malware team to make sure that this is on their radar. More info is at http://support.google.com/webmasters/bin/answer.py?hl=en&answer=168328 http://support.google.com/webmasters/bin/answer.py?hl=en&... and by doing a [site:google.com malware review] search, but it looks like you've requested the malware review correctly. In the mean time, I'd just double-check for any way that malware could have been included/downloaded on the pages.
- mopoke 14y agoSame on feedly.com.
- jnsaff2 14y agoThe alert says that theverge.com itself is not blacklisted just contains stuff from infected sites. I would try setting a new hostname for the cdn content servers and see if that works. Assuming of course they have gotten rid of the malware.