Google glitch causes confusion

Posted by Maxim Weinstein Sat, 31 Jan 2009 16:23:21 GMT

This morning, an apparent glitch at Google caused nearly every [update 11:44 am] search listing to carry the "Warning! This site may harm your computer" message. Users who attempted to click through the results saw the "interstitial" warning page that mentions the possibility of badware and refers people to StopBadware.org for more information. This led to a denial of service of our website, as millions of Google users attempted to visit our site for more information. We are working now to bring the site back up. We are also awaiting word from Google about what happened to cause the false warnings.

[Update 12:31] Google has posted an update on their official blog that erroneously states that Google gets its list of URLs from us. This is not accurate. Google generates its own list of badware URLs, and no data that we generate is supposed to affect the warnings in Google’s search listings. We are attempting to work with Google to clarify their statement.

[Update 12:41] Google is working on an updated statement. Meanwhile, to clarify some false press reports, it does not appear to be the case that Google has taken down the warnings for legitimately bad sites. We have spot checked a couple known bad sites, and Google is still flagging those sites as bad. i.e., the problem appears to be corrected on their end.

For more information about how the process works and the relative role that Google and StopBadware.org play, please see our Clearinghouse page or this question in our FAQ.

[Update 1:36] Google updated its statement to reflect that StopBadware does not provide Google’s badware data.

[Update 2:35] Hopefully this will be the last update, as Google has acknowledged the error, apologized to its customers, and fixed the problem. As many know, we have a strong relationship with Google, which is a sponsor and partner of StopBadware.org. The mistake in Google’s initial statement, indicating that we supply them with badware data, is a common misperception. We appreciate their follow up efforts in clarifying the relationship on their blog and with the media. Despite today’s glitch, we continue to support Google’s effort to proactively warn users of badware sites, and our experience is that they are committed to doing so as accurately and as fairly as possible.

Comments

  1. Fil said 25 minutes later:
    How to disable this "feature" in Firefox? I didn't even know it existed.
  2. Torrence said 27 minutes later:
    I am told it is your web site and coding that went all crazy. Glitches happen, but what will destroy confidence in a company is keeping quiet. Google has yet to explain what happened. Your headline is wrong. It is not just confusion, but damage to millions of websites that are now flagged as harmful. I will use Yahoo from now on, thank you very much.
  3. lolTorrence said 29 minutes later:
    kk, but millions will still use google
  4. Torrence said 31 minutes later:
    Google says it is unclear what caused the problem, which is now resolved, but that it will make a statement later. "There was a fault. We don't know the nature of it yet. Everything has been solved. We are still making initial enquiries, " a Google spokesperson told BBC News.
  5. Friðrik Már Jónsson said 32 minutes later:
    I'm really excited to know what went wrong from a software engineering standpoint. Please keep us posted on what Google says, or post a reference to any official statement they make online.
  6. Maxim Weinstein said about 1 hour later:
    @Torrence: A false report indicated it was a result of a problem at StopBadware.org. This is not correct. It appears that the false flags were removed fairly quickly and that Google's search results are working properly again.
  7. Sukhinov Anton said about 1 hour later:
    It still written in «Google Webmaster Tools» that my site is ditributing malware. This message appeared 1 hour ago. Should I request a review, or this notice will be removed automatically later?
  8. Eric Wernier said about 1 hour later:
    Wow Torrence, were you really let down for the whole 30 minutes or so? I'm interested to know what happened as well, but it wasn't the end of the world for me. You have a good time with your Yahoo search.
  9. David Bradley said about 1 hour later:
    Matt Cutts says Google will make an announcement on their blog soon...
  10. Mark said about 1 hour later:
    Does StopBadWare notify websites that it makes malware accusations against? What recourse is provided when websites suffer harm as the result of false StopBadWare accusations?
  11. Eric Wernier said about 1 hour later:
    Read the google blog, they have your answers.
  12. Maxim Weinstein said about 1 hour later:
    @Sukhinov: If a Google search for site:yoursite.com still shows the warning, you should submit the review (through Webmaster Tools for fastest results) and also check your site carefully in case it really was compromised.
  13. Matteo said about 1 hour later:
    but why the Google News's site went down this afternoon, and what's really happened?
  14. Maxim Weinstein said about 1 hour later:
    @Mark: Google actually determines whether a site is bad and puts up the warnings with no involvement from StopBadware.org. We serve as a support mechanism for site owners to assist them in cleaning their sites and navigating the review process. We also offer an appeals-like review process of our own for users who are not having luck with Webmaster Tools. I believe if someone is registered with Webmaster Tools, they will be notified when Google detects their site as bad. They might also attempt to send e-mail to webmaster@domainname, though I'm not sure about that. We may offer a similar notification service across several data providers in the future.
  15. Ingo said about 1 hour later:
    Here is a short video and some sceenshots from the google bug.
  16. liz said about 1 hour later:
    here's Google's blog post about it: http://googleblog.blogspot.com/2009/01/this-site-may-harm-your-computer-on.html just good ol' human error. perhaps they will sanitize the blacklist for "/" and other entries moving forward.
  17. Ingo said about 1 hour later:
    I forgot to post the url: http://blog.polymorph.at/?p=16 ;)
  18. Chuck Wekch said about 1 hour later:
    From the Google Blog mentioned: We work with a non-profit called StopBadware.org to get our list of URLs. StopBadware carefully researches each consumer complaint to decide fairly whether that URL belongs on the list. Since each case needs to be individually researched, this list is maintained by humans, not algorithms. We periodically receive updates to that list and received one such update to release on the site this morning. Unfortunately (and here's the human error), the URL of '/' was mistakenly checked in as a value to the file and '/' expands to all URLs.
  19. Jimmy said about 1 hour later:
    When I search youtube on chrome I get 'www.youtube.com is suspected of being a phising site'. My blog 3 days earlier got flagged by this bullshit system even though it hosts no malware and the IP listed that contains malware isn't on my server. Ditch the stupid system all together if you're going to ignorantly brand websites as guilty until proven innocent. http://www.google.com/safebrowsing/diagnostic?site=http://blog.jimmyr.com/High_Quality_on_Youtube_11_2008.php&hl=en
  20. Matteo said about 1 hour later:
    For italian user: Informazioni è aggiornamenti qui http://mmblogfree.blogspot.com/2009/01/google-in-tilt.html
  21. Torrence said about 1 hour later:
    I am sorry. I just got scared is all. Since malware sites are removed from Google search, I was afraid all my work was going to be gone. I do apologize for being so freaked out. Please forgive me. Peace and Love Tory
  22. David Bradley said about 1 hour later:
    It's fixed and Matt Cutts announced the explanation http://bit.ly/H8Vz
  23. Diego R said about 1 hour later:
    Got some people scared, especially my roommate. Check out Google trends now. http://www.google.com/trends/hottrends?q=warning+visiting+this+web+site+may+harm+your+computer!&date=2009-1-31&sa=X
  24. ferdi tayfur said about 1 hour later:
    but why the Google News's site went down this afternoon, and what's really happened?
  25. Christian said about 2 hours later:
    This is not good. Now webmasters etc. have to explain this glitch to their users for many days to come. Errors like this SHOULD NOT HAPPEN! As Google basically is THE search engine, a glitch like this has very, very serious impact all over the world. Today I lost a little respect for the code people at Google/StopBadware...
  26. AJ Ward said about 2 hours later:
    Frankly, i =DO NOT WANT= google "protecting" me in this manner. If I click on a link, I EXPECT to go to the site that was referenced. If my computer starts to melt as a result of that action, so be it, MY BAD! STOP INTERFERING WITH MY INTERNET!!!!!!!!!
  27. Matt said about 2 hours later:
    AJ Ward, you can still visit the URL - or just use a different search engine. It only affects a tiny fraction of results (except earlier today...)
  28. Samrat said about 2 hours later:
    @Maxim Weinstein Googe said it gets data from u which is then updated to their servers and there was an error in the checkin..this doesn't mean that u had given the wrong data.. Google never blamed you.. But you are reading the article in a wrong way..(or am i Wrong!!)
  29. Pavan Kumar said about 2 hours later:
    This is really horrible blame game, they blaming you and you throwing mud on them. The sufferers are we users. Anyway, it finally got a good end and that's what we all need. Don't bother who is responsible... :-)
  30. JBilinski said about 2 hours later:
    Everyone clearly just wants to keep their job. This kind of thig is going to happen -- there's no perfect system. Somone may have lost a few bucks, but, I'm sure there's no legal liability (didn't you read that disclaimer?). Bottom line: someone discovered an undesireable feature and hopefully it won't be expressed again.
  31. Tom said about 2 hours later:
    The people who claim they don't want google protecting them are silly. Besides, google still gives you the URL, you just have to indicate you really wanna go there by copy pasting the URL to your address bar (which takes SECONDS). Also, to the idiot who wanted to turn off the feature in Firefox: Firefox didn't glitch, and if you like getting viruses you can go to Tools -> Preferences -> Security and uncheck the "Block Reported Attack Sites". If you also would like to give your login information to PayPal@notreallypaypal.co.uk/hacks/haxx0r/login, you can also uncheck "Block Reported Web Forgeries".
  32. Maxim Weinstein said about 2 hours later:
    @Samrat: It is incorrect that they get their data from us. They generate their own data. @Pavan: We're not interested in pointing fingers, and I don't believe Google is, either. We're trying to ensure that anything stated publicly is factually accurate.
  33. Joergensen said about 2 hours later:
    This incident was pretty bad in general, but especially within the adultbusiness. As such a substantial part of adult sites are flagged and they should stay that way due to malware, but for those adultsites that adhere to a high degree of security and respecting numerous filters, it is not going to be easy to explain towards their users/customers what happened. I have already received numerous questions by mail concerning webcamsfan.com which has an all time clean record with numerous safeguards. My sites credibility has been damaged.
  34. Tony Evans said about 2 hours later:
    This is very bad. The person who did the error should be fired.
  35. Mark said about 2 hours later:
    According to a statement issued this morning by Matt Cutts, "We [Google] work with a non-profit called StopBadware.org to get our list of URLs." Mr. Cutts goes on to explain that, "We periodically receive updates to that list and received one such update to release on the site this morning. Unfortunately (and here's the human error), the URL of '/' was mistakenly checked in as a value to the file and '/' expands to all URLs." See http://googleblog.blogspot.com/2009/01/this-site-may-harm-your-computer-on.html StopBadWare has replied that, "Google generates its own list of badware URLs, and no data that we generate is supposed to affect the warnings in Google’s search listings." Asserting that "no data that we generate is supposed to affect the warnings" is not the same as asserting that StopBadWare did not supply a list with the defective URL at issue. If StopBadWare was responsible for the inclusion of the inclusion the URL of '/' it should admit it now. This incident deserves to be treated with honesty and transparency by StopBadWare. Potentially millions of Adsense publishers and and other online operations suffered financial damages as the result of be falsely identified with malware. Here is a very simple question: Did StopBadWare send Google a defective URL list that led to problem?
  36. Florian said about 2 hours later:
    Human errors are possible, but the damage done to many reputable websites is gigantic. I'm pretty shocked that this whole system of flagging doesn't include more verification steps when there is an update, it's obviousely flawed. Incidents like this one could seriousely damage or ruin businesses, I got 3 calls from scared customers.
  37. Great Unwashed said about 2 hours later:
    So someone made an error, it happens and it is easy to explain to your customers with a link to the google blog. Stop crying, nobody died it was nothing but a minor inconvenience. What is annoying though is google's blog post SUGGESTS that the error (the addition of the / URL) was by StopBadware and StopBadware SUGGEST that it was Google. Both companies made vague statements that hint it was the others fault but do not outright say so and neither have admitted it was their fault. This makes both StopBadware and Google look bad. Politicians often refuse to say "I made a mistake, sorry" and I'm not sure what psychology research this is based on but refusing to do so just makes the person who made the mistake look worse. It would be good for PR if someone put their hands up and said "whoops. my bad." As for changing search engines, yeah right. You might for a couple of days then you will be back on google.
  38. wmc said about 2 hours later:
    It's amazing what results an automated update can have. Actually I'd have expected, G would test drive updates on basically everything. But then again, a test phase would probably take too long and give malware sites too much of a headstart... Well, glad it was over quickly.
  39. Lenny Rachitsky said about 2 hours later:
    Really impressive that Marissa Mayer herself gave such a clear and transparent explanation of what went on, what they did to fix it, and what the impact was. If not for that detailed explanation, I think the public response could have been much worse. A lesson for all large online service providers.
  40. Acai Berry said about 2 hours later:
    I hope they clear up their statements. Where do they get their data from it does seem to match yours?
  41. Maxim Weinstein said about 2 hours later:
    @Mark: Let me clarify. The only URLs we ever submit to Google are ones that they have previously told us are bad and that we are sending back to them because we believe the site should be rescanned to see if the badware is gone. The last such list we sent was yesterday at 5 p.m., and it did not contain a '/' as one of the records.
  42. CasTex said about 2 hours later:
    That was weird, my site (http://www.downloadic.com) was seem to be harmless, but now its ok...
  43. BdR said about 2 hours later:
    This is unacceptable! Should not happen again or Google is out and Yahoo is back...
  44. Gary said about 3 hours later:
    How odd, that one simple mistake on Google's end can buzz the whole World. Guys, check the blog-search for the term "This site may harm your computer". At the time of this post 1000+ entries for the past few hours and about 20 new posts pop up every minute. Incredible
  45. John said about 3 hours later:
    I wonder if google in any way can be liable for this incident. There is no doubt that the responsibility solely is at Google, but because of this incident, many website owners are facing negative impacts due to wrongful labelling of their website. In example the website http://cybersexcam.vipsexcam.com which was hurt badly today as they had just launched an expensive campaign. Who will cover their losses in this respect?
  46. DDR SDRAM said about 3 hours later:
    Saw this when I got online earlier today. However it took a couple of searches before I actually realized that it wasn't just the first result that I was looking at which suddenly had this status. Whatever the cause, it's nice to know that it's fixed now. Was quite a shock for a moment until I realized that sites all around were affected!
  47. This Site May Harm Your Computer said about 3 hours later:
    Some people just need to step of their high horses. Well done to the Google team for reverting the error swiftly. I mean, most could see this for a max of 40 minutes. I wish our tech team could fix their problems as quickly. But, at the end of the day - human error happens, afterall, We ARE human. The Big G needs to just put a more robust QA in place.
  48. Sam Johnston said about 3 hours later:
    I couldn't believe my eyes when I saw this before and figured it was just that I'm using bleeding edge browsers (WebKit and Firefox 3.1b2)... or that as I was trying to index trademarks in response to the Psion Netbook debacle I'd somehow upset the machine. "Moral of the story: Wherever black or white-listing is implemented there are more moving parts and more to go wrong. In this case the offending service provides a tangible benefit (protecting users from malware) but those of you whose leaders are asking for your permission to decide what you can and can't see on the Internet should take heed - is the spectre of censorship and the risk of a national Internet outage really worth the perceived benefit? Will such an outage be rectified within an hour as it was by Google's army of SREs (Site Reliability Engineers)? And perhaps most importantly, will the scope of the list remain confined to that under which it was approved (typically the 'war on everything' from child pornography to terrorism) or will it end up being used for more nefarious purposes? In my opinion the benefit rarely outweighs the (potential) cost."
  49. rb said about 3 hours later:
    The real problem is the lack of checking software on every possible condition.
  50. William said about 4 hours later:
    Has anyone noticed that the BitDefender website is listed as malware still?
  51. arun said about 4 hours later:
    Just shows that even the mighty google is prone to error ! However, what is a bit scary is that such a simple error can have such devastating effect on millions of websites and users. Important lesson for all of us as we rely increasingly on technology for everything,
  52. Moses said about 4 hours later:
    I wish there is a option to turn off this function.
  53. Kenneth said about 4 hours later:
    Good the glitch is over. Thought my computer was infected or something like that. Just hope it was a one-time issue. @William: I see the same thing, guess it will be fixed soon.
  54. Ivo said about 4 hours later:
    You wrote: ...[Update 1:36] Google updated its statement to reflect that StopBadware does not provide Google’s badware data. How comes, that Marissa Mayer, VP, Search Products & User Experience still pronounces you as the cause of the error?! She writes: "...We work with a non-profit called StopBadware.org to come up with criteria for maintaining this list, and to provide simple processes for webmasters to remove their site from the list. We periodically update that list and released one such update to the site this morning. Unfortunately (and here's the human error), the URL of '/' was mistakenly checked in as a value to the file and '/' expands to all URLs." Get the full statement at http://googleblog.blogspot.com/2009/01/this-site-may-harm-your-computer-on.html One plays with monkeys, one gets bitten!
  55. Google Error said about 4 hours later:
    I'm glad to see that google admits it was an error and tell us what really went wrong. that blogpost was far for reassuring than just a plain 'apology' statement. Keep the good work guys, after all nobody is perfect. :)
  56. Maxim Weinstein said about 4 hours later:
    @Ivo: She doesn't.
  57. Saquib said about 5 hours later:
    I really wish to read more and more on that topic, as how it happened, and what was the affected stats? like when stopbadware site goes down, how many hits it receive before being down? and several other statistical information is what I would love to have on this incident:)
  58. Emilio Vicari said about 6 hours later:
    To me, as a software developer, it's simply unbelievable that whatever manages those badware entry lists doesn't check for the infamous "/" entry...in a company such as Google someone should have thought about this.
  59. ryan said about 6 hours later:
    Are you people seriously so handicapped that if Google disappears or malfunctions you are no longer able to browse the web? This is a pathetic display. "Web 2.0" has made you all like internet babies who need to be spoon-fed their digital content.
  60. Michael said about 6 hours later:
    Bitdefender is still damaged by this and I wonder when Google will correct their position. I also observed that one of the nets leading sites within the adult industry AWEmpire was going on and off with the remark of "This site may harm your computer" Guess some webmasters out there lost a lot of revenue today and I can't help thinking if this might happen again.
  61. Webdesign Kapeljosie said about 6 hours later:
    What 1 / can do..
  62. Michael said about 6 hours later:
    Various websites are still listed with malware-alerts and Bitdefender which is a wellknown and wellreputed AV-company is suffering from this. I noticed a while ago that a discussionforum for adult webmasters AWEmpire also were facing this issue. The question that remains is whether this will happen again. Unfortunately Im afraid it will.
  63. @ver said about 6 hours later:
    Hm... Small bug has broken one of the biggest websystem in the web - google... :-)
  64. Michael said about 6 hours later:
    Various websites are still listed with malware-alerts and Bitdefender which is a wellknown and wellreputed AV-company is suffering from this. I noticed a while ago that a discussionforum for adult webmasters AWEmpire also were facing this issue. The question that remains is whether this will happen again. Unfortunately Im afraid it will.
  65. John Howard said about 6 hours later:
    Why do so many people think this is a big deal? Why, just today I saw a person write today that linux is the most virus-free OS in the world and he didn't have to worry about malware and free internet and free software is the natural order of things. Google is one of those free things.
  66. John Howard said about 6 hours later:
    What are these Apache errors? Looks like this is the day for false error messages.
  67. Brandon Palmen said about 6 hours later:
    @John Howard -- As you might imagine, our servers are under a heavy load, and have been for much of the day. We're doing our best to keep everything running smoothly.
  68. goalpost said about 6 hours later:
    I did wonder why we got a hit on our Premier league site stats. This isnt good overall for Google!
  69. Ulco said about 6 hours later:
    An incredible but unfortunate error from Google. I am happy to see that they have taken responsibility for it and cleared the name of stopbadware.org. Human error is everywhere, kudo's to Google (and you guys) for their quick and public correction.
  70. Themes said about 6 hours later:
    All our PCs were effected. For a moment there, we thought some new form of Internet browser worm had spread across the network! Good to see everything is back to normal. phew!
  71. http://kipram.com/ said about 7 hours later:
    Pure human error
  72. Maxim Weinstein said about 7 hours later:
    @Michael: Probably unrelated to this morning's incident, BitDefender.com was flagged due to an extremely rare false positive by Google's scanning. The Google team has corrected this, and the warning will disappear shortly.
  73. NameGuy said about 7 hours later:
    The wording of a statement must be made with great care in situations like this... tensions run high when people don't get what they normally take for granted.
  74. Smartone said about 7 hours later:
    You guys screwed up. Probably you will have to pay 2-3 million bucks to Google!
  75. www.google.com/analytics said about 7 hours later:
    Wrongly labeling all legitimate sites in the world as dangerous to user computers is penny-ante stuff. Another error that Google has sat on was a snaffu in Google Analytics (GA) that corrupted all data for any sites using segments. GA started reporting laughable figures like 0.04 pages per visit (yes, not a typo... and when Google Support got a ticket they were AFRONTED we could doubt that GA is always right) meaning people visited and saw less than one page per visit. It is alleged that GA fixed this with a change to _setVar as of Jan 27, but considering they compleltely messed up average bounce rates, time on page, visits, and basically everything until now, you be the judge. ------------------------------------ Dear Google Analytics User, As an Administrative user on an account that is currently using custom visitor segments in Google Analytics, we would like to inform you of some changes to the _setVar method and its impact on bounce rate and time on page metrics. Starting Wednesday, January 27, 2009 a call to the _setVar method will no longer be counted as an interaction hit with the result that you may see higher bounce rates and more accurate time on page metrics in your reports. [...] Sincerely, The Google Analytics Team
  76. makine said about 7 hours later:
    i love google =)
  77. Very Concerned IT Person said about 7 hours later:
    WHAT IF THIS GOOGLE SITUATION HAD BEEN PART OF A COORDINATED INTERNET ATTACK? I am personally aware of these critical *technology* risks: 1. Seven of 13 Internet backbone servers down in 2002 2. Additional Denial of Service attacks on the Internet backbone 3. Major accounting firms have been sending IRS tax return processing offshore for several years 4. Recent major Internet slowdowns in Asia 5. Iran totally offline in early 2008 just before its oil bourse was scheduled to go live 6. Chinese hackers gained access to Department of Defense computers/trojan uploaded into DOD computers 7. Recent CheckFree attack/Identity Theft due to redirection of their domain to a criminal site 8. The intended Fannie Mae sabotage from last October that is just being reported now, possibly with a date of activation of *today* ("Rosenstein says that on that day, Makwana programmed a computer with a malicious code that was set to spread throughout the Fannie Mae network and destroy all data this Saturday. ") What if Fannie Mae is not the only company that was sabotaged?? I have spent a full week trying to escalate a situation that could have been the same as the CheckFree attack by fraudulent redirection in relation to IRS "free file" forwarding to a private organization with a GoDaddy domain created in 12/08 with proxy privacy. I had phone conversations with High Tech Crimes and the IRS free filing manager, but there was no ability to talk with anyone live at Intuit or Quicken, the hosting providers of the only weeks-old/private GoDaddy domain. When the Fannie Mae sabotage was made public, I escalated my concerns about the incredible risk if all of IRS information was forwarded or hacked. Just imagine if everyone's full SSN, exact birthdate, full bank account information, valid e-mail address, UserID/password that could be the same as used for bank access, all W-2 EIN numbers of the employer companies, ... was accessed/stolen! QUESTION: If someone simply attempted to access all of those bank accounts to transfer funds out of the country, WOULD THAT QUALIFY AS A RUN ON ALL BANKS? Would that qualify as a "high tech 9/11"? Then, a couple of days ago, GoDaddy suspended my draft website because "Afilias, the .info registry, recently advised the Abuse Department that the domain zzz.info was associated with malware" and I was given a link to a Google page explaining that another domain was involved and I believe the malware was on its server. I have been unable to get an answer as to whether my shared server had been hacked with malware or "just" that my domain was being forwarded to another site, just as CheckFree had been attacked. Then, on top of my IRS concerns, GoDaddy's having suspended my own domain with the Malware search result, and the Fannie Mae grand jury results about a planned attack for *today*, 1/31/09, Google suddenly is very visibly sabotaged, by accident or by intention (which Google would never/ever admit to). Upon further research, I found that Intuit, where all of the critically personal IRS data is stored, is now owned by Google and they are both located in Mountain View, CA. Both Google and Intuit use www.markmonitor.com as their registrar. That international registrar states that it works with over 50 of the Fortune 100 companies. QUESTION: Could MarkMonitor be accessed (legally or illegally) as it appeared Network Solutions was for the CheckFree redirection attack? Are those Fortune 100 companies at risk, like CheckFree proved to be? THE MOST IMPORTANT THING I LEARNED IS THAT, JUST LIKE 9/11, THERE IS NO "RED ALERT" PROCESS TO REPORT AN INTERNET ATTACK! Even the Chicago commuter trains now have emergency contact information to call or text, if the train is hijacked. I tried every single one of these avenues: Online form: Internet Fraud report via FBI.gov site E-mails: - cert@cert.org - abuse@GoDaddy registrar for possible spoof site - abuse@IANU registrar for possible spoof site (due to a Read Receipt received via GoDaddy proxy with a different domain) - zzz@IRS.gov Phone calls: - Counterterrorism Section (part of National Security Divison below), receptionist transferred me to on duty attorney, a MESSAGE MACHINE WITH NO CALLBACK - National Security Division, receptionist thought I should call DHS, put me on hold for 6-7 minutes (clocked), still couldn't give me DHS phone number - DHS Citizen Line, receptionist transferred me to an executive assistant who indicated he receives quite a few phone calls that he doesn't know how to handle. He gave me the name and phone number for the Director of Community Preparedness (which would be for *after* a disaster). I called - yet another MESSAGE MACHINE WITH NO CALLBACK. NOTE: It is very obvious that those in charge of protecting our country before and after emergencies failed with 9/11, failed with Katrina, and are totally incapable of dealing with an Internet attack of any kind, even though there have already been such attacks. WHY IS THERE NO "RED ALERT" PROCESS TO REPORT AN INTERNET ATTACK?? WHAT IF GOOGLE WERE STILL FAILING AS I WRITE? WHAT IF ALL BANK ACCOUNTS OF IRS E-FILERS WERE BEING CLEANED OUT RIGHT NOW?
  78. Sam J said about 7 hours later:
    It's interesting that BitDefender is still flagged as malware... I haven't found a bad word anywhere about them (quite the contrary in fact) and you can be sure that something like this would have ended up in their Wikipedia article at least. It's not just www.bitdefender.com either - it's everything under their domain (eg myaccount.bitdefender.com. They're probably the last company that wants to be accused of being malware - you can be sure that everyone who sees this today won't bother them with their business again. I wonder what the liability situation with false positives is? Sam
  79. Nik@guru.com said about 7 hours later:
    Google will not last for long... Facebook will become unreliable source for cash-flow on advertisement.
  80. Mateo said about 7 hours later:
    I am going to sue somebody!
  81. Cogmios said about 7 hours later:
    From a software developer point of view... this will become the biggest example of what can go wrong when putting stuff in production... marking ALL websites in the world as unreliable.... LOL! (well... do you remember some years ago when google marked all websites in thw world as unreliable.... *proest*).
  82. Krag said about 7 hours later:
    I am glad Google found the fault so quick! It is funny that billions of web pages were blocked after only one wrong statement...
  83. Lance said about 8 hours later:
    Google's been running how long now.. The claim is that this was human error. Yet it would seem illogical to leave such a mission critical piece of the puzzle for Google's search results at a wetware 'eyes-only' level for so long.. That and the fact the story keeps on contradicting itself by shifting blame (first Badware, now some anonymous Google employee) seems a greater tell than what is being said. Wait and see when the anon Google employee decides to fess up..
  84. Mathurin said about 8 hours later:
    In french : et bien ça a foutu un sacré boxon tout ça ! Dire qu'on pensé que cela provenait de stopbadware
  85. Very Concerned IT Person said about 8 hours later:
    From http://googleblog.blogspot.com/: "We periodically update that list and released one such update to the site this morning. Unfortunately (and here's the human error), the URL of '/' was mistakenly checked in as a value to the file and '/' expands to all URLs. Fortunately, our on-call site reliability team found the problem quickly and reverted the file." @Cogmios/Lance - isn't "reverted the file" the offshore equivalent phrase for "restored the prior backup"? Exactly who has access to Google production code? Are any of those people from China? Obviously, there was no testing or even a manual code review by a second person of what was checked in to be moved into production. What if in the "rollout", the problem had, instead, spread a trojan everywhere? What if it *was* intentional, just like Fannie Mae and CheckFree? Is the anonymous employee long gone? What if Google was still failing this many hours later? It is my understanding that the power usage leveling of our entire electrical grid requires the Internet, as do ATMs and any debit/credit purchases- Isn't the plotline of this season's TV show, 24, about holding the US hostage via a technology hijacking? If Hollywood can imagine such things, so can others-
  86. TheAphid! said about 8 hours later:
    That person should *NOT* be sacked. He or she is now the BEST person for the job because they will not make that mistake again!
  87. Kostenlose Kleinanzeigen said about 8 hours later:
    Hopefully this will not happens again ;-( Are we human, or are we ...
  88. Remember Google-Hack last time said about 9 hours later:
    Anyone who remember this here, when guugle got hacked in germany last time?!
  89. JAB_au said about 9 hours later:
    Human error, it's a wonderful thing.
  90. Tomislav said about 9 hours later:
    At the end of the day me happy. It's not me picking up some annoying worm but Google messed up the internet :)
  91. DotA AI Maps said about 9 hours later:
    Yeah. Human error. Its ok. :)
  92. sedat said about 9 hours later:
    this was really interesting happening, real chaotic and complicated for all web around the world, google is the best search engine..
  93. Roseli A. Bakar said about 10 hours later:
    People does make mistake. It happens.
  94. Hok said about 10 hours later:
    I got Samsung official page as a bad site warning. And I think something isn't right. I am right :). But it is ok. I hope this mistake will not happen again.
  95. google.com said about 11 hours later:
    In 8th grade English I learned that we use the passive voice when we've done something wrong and want to avoid taking responsibility, e.g. "the URL of '/' was mistakenly checked in as a value to the file."
  96. mgmiller57@yahoo.com said about 11 hours later:
    Yeah, this created some real problems for me this morning. I trusted you guys.
  97. hr@wuce.net said about 11 hours later:
    I didn't use google at that time,so I did not miss the problem.I just know this news from yahoo.
  98. wuce.net said about 11 hours later:
    I did not use google at that time,so I did not miss the problem.I just know this news from yahoo.
  99. qwezz said about 11 hours later:
    I can't believe how ridiculous some people are about this. BFD! This was an error, and certainly no reason to freak out and threaten to stop using Google. Torrence, mgmiller57, etc... you guys need to take a pill. P.S. mgmiller -- enjoy the gay porn subscriptions.
  100. Marge said about 11 hours later:
    I felt the same way this morning I thought I got a virus on the computer or hijacked. I did go into IE to explore if it was on there end. Couldn't find no one writing about it. I wish google would have informed us at google search to let us know it was on there end.
  101. Aslex said about 12 hours later:
    I think we have to get down to business and forget about this problem. Imagine the whole world would use msn for search.. how many errors of this classification would we get then...?
  102. Geo said about 12 hours later:
    I'll tell you what, it certainly wasn't pleasant having to use Yahoo for those 40 minutes because I couldn't find a darn thing I wanted!
  103. Panama said about 12 hours later:
    i think this error can cost google billions in complaints.....
  104. I & Y said about 12 hours later:
    What was very strange was the fact that during the crisis period, the search term "youtube" turned up results that were fine.
  105. Archy said about 13 hours later:
    Until now , google does not find out the problem , only said there has an error , in fact it was hacked by someone , how do it say ? You may go to google.com , click the preference button , there has a language version named " HACKER " , this was appear after the search errors . Being no honest company will got a bad result ... I dunno why google cannot just tell it was hacked.
  106. dmondark said about 13 hours later:
    No one is perfect unless they say they're perfect. And if they say they're perfect people would expect perfection. It was a "fail" and people will remember it as a fail. In fact, it is already being claimed as a global holiday. The day that google spat on the web. It's OK. Mistakes happen. Errors happen. Forward slashes happen. No one is to blame - except for humans of course. But that's OK too. It was a fun day.
  107. chetan said about 13 hours later:
    Search engine really boost the software development speed , We experienced those 40 minutes of human errors , Google is the best search engine among all . A small hole in the big ship can down it to bottom of sea . Google take care .
  108. dmondark said about 13 hours later:
    @chetan For Sergey's sake. Stop submitting the same comment over and over.
  109. seo土坷垃 said about 13 hours later:
    你们的这个服务很好。希望你们能和中国的搜索引擎公司合作,开展这项业务。例如中国的百度。