Help - Search - Members - Calendar
Full Version: GOOGLE and SPYWARE - Must Read !
B.I.S.S. Forums > Internet Security Forum > Internet Security Discussion
Pages: 1, 2
madizms
On further inspection with firefox, I noticed it's still dialing home to google
not only that, but if I block it from dialing home to google I can no longer browse. My findings using outpost indicated it's dialing to sb.google.com
but if I block sb.google.com using outpost firewall custom rule, it then renders firefox useless and one can't even browse anything except :blank.
So does firefox need sb.google.com to run ? It seems so and im very annoyed lol.

Can anyone else clarify my findings ? as I haven't seen anyone mentioning about this anywhere.

I dont need google, I never did, and I dont want it in my friggin firefox
iuffra
QUOTE (madizms @ Jan 13 2007, 11:13 PM) *
On further inspection with firefox, I noticed it's still dialing home to google
not only that, but if I block it from dialing home to google I can no longer browse. My findings using outpost indicated it's dialing to sb.google.com
but if I block sb.google.com using outpost firewall custom rule, it then renders firefox useless and one can't even browse anything except :blank.
So does firefox need sb.google.com to run ? It seems so and im very annoyed lol.

Can anyone else clarify my findings ? as I haven't seen anyone mentioning about this anywhere.

I dont need google, I never did, and I dont want it in my friggin firefox


sb.google.com is the 'Google Safe Browsing', phishing protection scheme
Tools -> Options -> Security and then UNcheck the 'Check by asking Google about each site' option

more info at:

http://forums.mozillazine.org/viewtopic.php?t=505396

iuffra vampire2.gif
madizms
wow I wasn't the only one then lol and that was only posted 30th dec
Thanks for that Iuffra smile.gif will pass this on to a few other people too.
winston
This is what happens if you block the Google-cookie :


( I have cut out my IP and what I am assuming is a hash of it )

Google needs a new name : GIA
Pirate_Hunter
WOW s*** damn there goes google for me but in a way I shouldve guessed they would do soemthing as malicious as that great I cnat even trust search engine except for just one, which google has laready tried to shut down
XPY
QUOTE (Aaron.Walkhouse @ Oct 26 2006, 05:28 AM) *
I have never used google and never needed it. ph34r.gif
http://www.copernic.com/en/products/agent/download.html

Interesting software
Sabu75
find this video.

Master Plan about the power of Google:

http://de.sevenload.com/videos/lyOnun9/Mas...power-of-Google

Sabu
Dadio
drinks.gif I have made the unfortunate mistake of upgrading to ie7 from the beta. I did not realize it included a built in search/spybar. I want to get rid of it. I found a reg hack wihch makes it disappear but it's still looking up EVERYTHING that you type in your browser bar. If you haven't done this yet copy and paste one of the entries in your hosts file into your browser bar. Then you get a lot of garbage on your screen that you definitly did'nt want in the first place. I personally used to like the "404". There was no mistaking what happened. Please someone find a way to get rid of the totally integrated spy crap.

I'm pretty sure you can just peel back to your previouse browser but have never done this and it sounds frightening. IE7 beta worked perfect for me and never had a minute of trouble with it. Google gives me almost as many blocks as trying to connect to M$. I have stopped using it.

Help
Dadio
QUOTE (Sabu75 @ Feb 16 2007, 10:35 AM) *
find this video.

Master Plan about the power of Google:

http://de.sevenload.com/videos/lyOnun9/Mas...power-of-Google

Sabu


Just thought you might want to know I block this range:



67.24.0.0-67.31.255.255 Level 3 Communications (Fed Ex email)
I have blocked this range because email from fedex connects to this server for all the other purposes FedEx deems necessary other than to deliver an email.

209.11.0.0-209.11.233.255 Globix Corporation (Fed Ex email)
This one also connects when email is recieved from Fed Ex and you have blocked the first one.
Dadio
QUOTE (Dadio @ Mar 19 2007, 09:21 PM) *
Just thought you might want to know I block this range:



67.24.0.0-67.31.255.255 Level 3 Communications (Fed Ex email)
I have blocked this range because email from fedex connects to this server for all the other purposes FedEx deems necessary other than to deliver an email.

209.11.0.0-209.11.233.255 Globix Corporation (Fed Ex email)
This one also connects when email is recieved from Fed Ex and you have blocked the first one.

Excuse me Sabu for messing up your post. The above info (on ip ranges) was met for the poster below i.e: The Copernic alternative posted by "xpy" Many Pardons.
http://www.bluetack.co.uk/forums/index.php...ost&p=78415
Cessna
Old topic but still very much in the news. Thanks Moore. Google is a very powerful spyware tool, no doubt. Some of us have been around along time in life and on these forums. I've been burned a few times by the bad guys and probably more often by whom I thought were friends and family at times. Who can you trust anymore. The Bush administration could takeover Google if Bush decided to write up some new bill and Google refused to cooperate. Its that simple. So what search engine doesn't track your footprints. Isn't this how they sell advertising. Thanks for the rant.

Good to see you guys are still around, sorry I haven't been in lately but I've been around and have BISS bookmarked.
Moore
No problem.. I started using that search engine Celticferret recommended somewhere before.

http://blackboxsearch.com/

QUOTE
While the search engines give your IP and other info away, and Google loses its fight with the govt, dont you think you should search by proxy?

Black Box searches return proxied results, which (if you dont click on too much ad junk) will not create any tracking cookies on your machine, nor reveal your IP address when typing in the search.

You can freely navigate the links for the result pages through our proxy. (Notice the blackbox link at the top of the page when you click on the next search results) You can also use the search boxes on the results pages to quickly do another search.


Seems to work pretty good and it covers google / msn and yahoo.

I've just plugged it into my searchbar - search engine list in greenbrowser so I can look stuff up directly without having to open up their page first.

http://blackboxsearch.com/cgi-bin/searchGoogle.cgi?q=%s

smile.gif
winston
QUOTE (Cessna @ May 15 2007, 05:28 AM) *
The Bush administration could takeover Google if Bush decided to write up some new bill and Google refused to cooperate. Its that simple.


Google was started with venture capital from Sequoia Capital, a known CIA-front .
And CIA is a known front for the Bush mafia-family, so they already own some of it ..
winston
Here's a search-plugin for scroogle using SSL (FireFox only):
http://www.searchplugins.net/pluginlist.as...e&view=mine

Here's the source-code for those who know what to do with it :
CODE
<OpenSearchDescription>
<ShortName>Scroogle SSL</ShortName>
<Description>Search Scroogle SSL</Description>
<Tags>scroogle ssl</Tags>
<Image height="16" width="16" type="image/x-icon">https://ssl.scroogle.org/favicon.ico</Image>
<Url type="text/html" method="POST" template="https://ssl.scroogle.org/cgi-bin/nbbwssl.cgi">
<Param name="Gw" value="{searchTerms}"/>
</Url>
<InputEncoding>UTF-8</InputEncoding>
<AdultContent>true</AdultContent>
</OpenSearchDescription>
Moore
Nice. Thanks for the info Winston.. smile.gif

Three years ago since we started this discussion I think these things [ your privacy and security on the internet ] are in an even worse state now than ever. Google is embedded in almost every website through google analytics or their ad's...

But what's even worse now though is that Google have been given access to people's browsing directly through the two main browsers. There is no escape, unless you know they are there in the first place, and are aware of the consequences..

So yeah great. Whose retarded idea was that.. Wonder how much Google paid to have their "features" added. ?

By being enabled by default through Firefox and IE7's supposed security features.. you are gaining a small protection against phishing sites in return for an even greater loss of privacy.

Unless you disble that junk. And I sure did.

I have been testing Firefox a bit over the last few days and saw a huge amount of sb google in my logs and thought what the ****. The bastards.. biggrin.gif
QUOTE
hxxp://sb.google.com/safebrowsing/update?client=navclient-auto-ffox&appver=2.0.0.7& etc etc

sb.google.com - 74.125.19.91

Then I remembered this thread and someone had already mentioned it.

------------------

Here's some info on how to disable this stuff in IE7 and FF.

If you really need anti-phishing protection there are many other tools available that don't compromise your privacy so much. I don't use anything for phishing protection besides my brain and being aware of where I'm going, so don't have any good alternatives in mind, but I know there are many free 3rd party apps available..

If someone want's to reply back with something they use for phishing protection instead that would be good.

-------------------

FF:
http://kb.mozillazine.org/Browser.safebrowsing.enabled

http://jon.oberheide.org/blog/2006/11/13/g...-safe-browsing/
http://archives.neohapsis.com/archives/ful...ubject.html#107

QUOTE
Firefox 2.0 incorporates the Google Safe Browsing extension in its own Phishing Protection feature to detect and warn users of phishy web sites. This preference, along with browser.safebrowsing.remoteLookups, determines whether or not the Safe Browsing functionality is active.

[edit]Possible values and their effects
[edit]True
Compare visited URLs against a blacklist or submit URLs to a third party to determine whether a site is legitimate. (Default)

[edit]False
Disable Safe Browsing.

Mozilla Firefox
A checkbox labeled “Tell me if the site I'm visiting is a suspected forgery” is located under “Tools → Options → Security”. [ Disable that sucker ! ]


-------------------------

IE7:
QUOTE
To disable automatic Web site checking:

Within Internet Explorer, click Internet Options from the Tools menu.
Click the Advanced tab.
Under the phishing filter, select Turn off automatic Website checking.
Click OK.
talotin
This reminded me of Sabu's news post here:
"Finjan Reconfirms Google’s Anti-Phishing BlackList Exposed"
http://www.bluetack.co.uk/forums/index.php?showtopic=16331

Most of those anti-phishing programs I've seen integrate into the browser. Finjan does too, but it's advertised as detecting malicious malware sites.
http://securebrowsing.finjan.com/

Google still maintains 54% of U.S. search queries too...
talotin
A dangerous conflict of interest between Firefox and Google:
http://www.cnet.com/8301-13739_1-9776759-46.html

From the Phishing Toolbars section of this article:
QUOTE
There is a normal cycle when a new phishing site is created. It works something like this:

* A new phishing site is created and is e-mailed about to thousands of people.
* Someone tips off Google, which adds it to the phishing blacklist.
* Millions of Firefox browsers download the latest blacklist from Google.
* Users who click on e-mails, taking them to the phishing site, receive a clear warning from Firefox, telling them that the site is malicious.

However, what happens when the phishing site is hosted by Google?

This very issue was discussed by noted Web application security expert Robert "RSnake" Hansen in August. RSnake discovered a cross-site scripting (XSS) flaw in Google's gmodules.com Web site. The security flaw, which has yet to be fixed, was dismissed by the Google security team, which claimed that it was, in fact, an intended design feature.

RSnake described the significance of the vulnerability, stating that the exploit would allow someone "to take over other people's Web sites when they embedded the erroneous third-party code. Kinda nasty. Unlikely, but nasty. More likely, it would simply be in phishing sites that didn't want their sites taken down, but wanted Google's to be taken down instead."

This brings us to a really interesting dilemma. Google has a well-known flaw in one of its Web sites that can be (ab)used by phishers and malicious hackers. Google refuses to fix the flaw, as it believes that it is not a problem. Google also operates the Firefox phishing blacklist. Will Google add one of its own domains to the phishing blacklist? Of course not!

RSnake, who worked in the antiphishing blacklist area for some time, makes several claims. On his blog, he wrote that "the browser companies have to maintain a list of sites that aren't phishing sites but often get flagged as phishing sites. Google happens to host a lot of those.

In reality, Google is being used to phish consumers or redirect to them to phishing sites, but Google doesn't really fix this problem. Instead, it tells the browser companies to whitelist its sites, regardless of the fact that consumers are losing their identities as a direct result of Google's actions in two ways: 1) because it has not ended the vulnerability and 2) because of its insistence in being marked as a 'good' site."

Essentially, what he claims is that with Google's rather menacing legal department, no other competing antiphishing company will dare to include a Google-owned domain on a blacklist. In addition, Google's domains get included on a whitelist shipped with antiphishing software, which is a list of domains that will never cause warnings.

RSnake further claims that in addition to intimidating the other firms in the market, Google refuses to include its own Web properties in the Firefox phishing blacklist, which it maintains.

While RSnake does nothing to hide his lack of love for the big G, his reputation in the Web application security arena is top-notch. Furthermore, in the two months since RSnake first made his concerns public, no one from Google has publicly disputed anything he has said.

With Google providing the blacklists for the new antimalware features in Firefox 3.0, we should all be asking: Can we trust Google? To paraphrase the old phrase, who will blacklist the blacklisters? With control of hundreds of millions of Firefox browsers, what incentive does Google have to keep its own Web properties free of phishing sites?


See article for more links... there's plenty more interesting stuff in there.
Aaron.Walkhouse
Oh ho ho ho! This definitely calls for a new FF plugin called "Don't Be Evil"!
Have it strip all exploitable html and script from only the google-hosted sites.
Moore
Just one of many good discussions on the "evilness" of google: http://www.webmasterworld.com/google/3483255.htm

QUOTE
Google’s overall goal is to have a record of every e-mail we have ever written, every contact whose details we have recorded, every file we have created, every picture we have taken and saved, every appointment we have made, every website we have visited, every search query we have typed into its home page, every ad we have clicked on, and everything we have bought online.

It wants to know and record where we have been and, thanks to our search history of airlines, car-hire firms and MapQuest, where we are going in the future and when...
winston
I mostly use the scroogle SSL plug-in but often this
is running in the background, making "random" BS search-queries :

http://mrl.nyu.edu/~dhowe/trackmenot/
QUOTE
TrackMeNot runs in Firefox as a low-priority background process that periodically issues randomized search-queries to popular search engines, e.g., AOL, Yahoo!, Google, and MSN. It hides users' actual search trails in a cloud of 'ghost' queries, significantly increasing the difficulty of aggregating such data into accurate or identifying user profiles.
talotin
Found this site:
http://www.phishtank.com/

You can report suspected phishes and search for known ones, etc.
cant-take-anymore
QUOTE (Xero Grid @ Jun 12 2004, 09:43 PM) *
Very interesting.

Well, I delete all my cookies multiple times a day, and never use any toolbars.
I thought the Google Toolbar seemed kind of fishey, and I was starting to doubt my own doubts until I heard it phones home.

Well, this reminds me of a company that my company works with and helping them get off their feet.
They are search engine programmers that may very well be Google's next competition. wink.gif

-- Xero Grid --


hacker use google to beat your firewall
by clicked the cached link hackers use this as a proxy and through google translator eg:

http://www.google.com/translate?langpair=e...blockedsite.com or host

what worrys me is that google is everywhere google adds google searchs if you block it u block a lot
of stuff even on other web sites they tent to look like this to wy-inf156.google.com wy-inf155.google.com
wy-inf101.google.com sometimes its harmless but not in my case and other sites like yahoo also have this
cache Vulnerablity any solutions?
Cessna
It has been a few years since this has been up. And all things considered how much has changed and yet this topic is still relevant and intensified. Google is even more the pimp "biatch" daddy of the internet as they conduct the orchestra and the little parasites go after defensless ISP's that Google sells to. They sell out to any company or agency willing to pay them the money and Google hands them over their search engine records on whatever they have recorded from average Joe's searches. Google Chrome is the grand daddy of them all. Its nothing less then a black tickling hole.... PS not to change the subject but how the hell is everyone doing here. I remember a few years ago telling you all about this little know "new" bittorent brand named "uTorrent" Have a nice day
The Netweasel
A Google trend I've noticed over the last few months is the proliferation of Google maps on various web sites.

The U.S. National Weather Service, for example, has recently added an interactive map "Powered by Google." I don't need it (I know where I live!), don't like it, and don't use it. It also takes a lot of bandwidth on my puny dial-up connection, so that makes it a nuisance as well.

Whatismyip.com also insists on loading a Google map for every IP I check. While I can simply hit my browser's "stop" button to make it quit loading, again, it's a nuisance.

What I really wonder about, however, is whether these Google maps represent a privacy risk. Does anyone here have a clue? I would really like to know.

huh.gif

In the meantime, after reading this thread, I hunted down and found the net range Google uses to feed these maps, and have started blocking it. This has the side effect of blocking the Google search engine as well, but I don't care to use that, either, except very rarely.

Now I don't know whether it would be smart to post that net range here, as it is a large one, I don't know what all might be within it, and I suspect it might cause people problems if they were to block the whole thing willy-nilly as I have done -- Google seem to have their fingers in everyone's pies these days.

unsure.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.