{"id":89093,"date":"2018-12-04T15:34:50","date_gmt":"2018-12-04T12:34:50","guid":{"rendered":"http:\/\/greatis.com\/blog\/?page_id=89093"},"modified":"2018-12-06T22:25:44","modified_gmt":"2018-12-06T19:25:44","slug":"google-dont-be-evil","status":"publish","type":"page","link":"https:\/\/greatis.com\/blog\/google-dont-be-evil","title":{"rendered":"Google! Don\u2019t be evil!"},"content":{"rendered":"
<\/div>

Google can kill your site and business by mistake in any moment!<\/span><\/h2>\n

No apologies! No regrets!
\n<\/strong><\/p>\n

How?<\/span><\/p>\n

Google Safe Browsing<\/a> (GSB)<\/strong> is a monster, activated by default in Chrome, Firefox, Safari, Opera, etc.
\nIt is watching every time when you visit a web page or download a file.
\n“Google Safe Browsing helps protect over three billion devices every day by showing warnings to users when they attempt to navigate to dangerous sites or download dangerous files.”
\n<\/span><\/p>\n

\"Google<\/a>

Google Safe Browsing<\/p><\/div>\n

But if your file\/site is flagged as malicious by GSB – you are dead<\/strong>!<\/span><\/h3>\n
\"You<\/a>

You are dead!<\/p><\/div>\n

Flagged file makes all web pages, contained links to that file malicious too.
\nIn some cases, the full web site may be blocked!<\/strong> <\/span><\/p>\n

\"Google<\/a>

Google “Harmful Programs” alert<\/p><\/div>\n

You will see a full screen red banner: \u201cThe site ahead contains harmful programs\u201d.<\/span><\/p>\n

It\u2019s very bad for downloads and business reputation of your company.<\/span><\/p>\n

You may ask: \u201cWhy?\u201d, but you will never receive a detailed answer. <\/span><\/h3>\n

The Google\u2019s suggested way to ask for a review using Webmasters Search Console<\/strong>.
\nYou will wait for 72 hours, then receive only short: \u201creview failed<\/strong>\u201d.<\/span><\/p>\n

You will receive a report with the same links\/ files flagged as dangerous. <\/span><\/p>\n

\"Malware<\/a>

Malware Found!<\/p><\/div>\n

You cannot ask Google to re-check the files using the review.<\/strong> <\/span><\/p>\n

Also, you can post a message to Google Webmaster forum.<\/span><\/p>\n

But you will never receive an answer from Google!<\/strong><\/p>\n

I found an old answer of “Sergey_Semenov”. Seems like he works in Google:<\/p>\n

“If it doesn’t help after a review in console, send Chrome issue report from browser (Alt+Shift+I) saying you’re a good white-hat company and your files is absolutely clean. It clearly helped us because we had all issues in google console disappeared after Chrome issue report without requesting another review. ”<\/p>\n

Bingo! Good Suggestion! Use the problem form report to report false positive!<\/h3>\n

Of course, you will never receive an answer.<\/\/p>

<\/div>

Is Google Safe Browsing a good antivirus?<\/span><\/h2>\n

Hmm\u2026 It is questionable. Your files are reported clean by 60 antiviruses<\/strong> on Virustotal.
\nBut it means nothing for GSB. <\/span><\/p>\n

GSB does not use Virustotal service<\/strong> at all.<\/span><\/p>\n

I made a simple test.
\nI uploaded new executable built from empty test project and signed by digital signature. <\/span><\/p>\n

Surprise! It was flagged as malicious!<\/strong> <\/span><\/p>\n

What else is needed to say about GSB antivirus possibilities? <\/span><\/p>\n

\"Google<\/a>

Google Safe Browsing<\/p><\/div>\n

Google Safe Browsing is a black box.<\/span><\/h3>\n

And sometimes it gives false positive alerts.<\/strong><\/span><\/p>\n

But Google do not accept false positive alerts.
\nIf you visit Safe Browsing web site, you will find a form to report malware or phishing, but there is not false positive form.
\n<\/span><\/p>\n

Google always right! Errors are impossible for Google!<\/h3>\n

But I see that they hide the errors using their “no answer” wall.<\/p>\n

How much does it cost to file a lawsuit?
\n$200 000 – $300 000
\nDo we have a chance to win?<\/p>\n

Your business is dead. And you will be dead. <\/span><\/h2>\n

This is a sad real story. <\/span><\/p>\n

\"Grim<\/a>

Grim Reaper<\/p><\/div>\n

November 29.<\/strong> \u00a0Google Safe Browsing bug affects several independent companies, developers of Windows software.<\/a>
\nSafe Browsing flagged their binary files as \u201cunwanted software\u201d [WNC-611600]<\/strong>. <\/span><\/p>\n

Affected: Greatis Software (RegRun, UnHackMe, BootRacer), Scooter Software (Beyond Compare), IBE Software (HelpNDoc), Blumentals Software (HTMLPad, WeBuilder, RapidPHP), Balanced Scorecard Software (BSC Designer), SpamBully, Gillmeister Software (Rename Expert) and others.<\/span><\/p>\n

Safe Browsing blocked the web pages contained links to the binaries and some web sites. \u00a0<\/span><\/p>\n

All binary files were signed by digital signatures. All this software is not brand new. RegRun was created in 1998. Most of the other affected software also has a long history.<\/span><\/p>\n

One common thing: software is related to the Delphi programming language.<\/span><\/p>\n

\"Google<\/a>

Google Safe Browsing Bug<\/p><\/div>\n

Delphi bug?!<\/span><\/h2>\n

It is not a new:
\n“Delphi applications considered ‘dangerous’ by Google Chrome”<\/a><\/p>\n

Have the story ended well?<\/span><\/p>\n

December 3: Issue was resolved.<\/span><\/h2>\n
\"Recovered<\/a>

Recovered Successfully!<\/p><\/div>\n

After three days Google, probably, fixed the bug, because the affected files magically became good. Google fixed the \u201cDelphi bug\u201d! <\/span><\/p>\n

Silently!<\/span><\/p>\n

No response from Google.<\/span><\/p>\n

\"Google<\/a>

Google Silence<\/p><\/div>\n

 <\/p>\n

Do I need to live in fear the rest of my life about the bug getting back?<\/span><\/h3>\n
\"Fear\"<\/a>

Fear<\/p><\/div>\n

 <\/p>\n

Detailed information about incident is here:<\/span>
\nhttps:\/\/productforums.google.com\/forum\/?utm_medium=email&utm_source=footer#!msg\/webmasters\/CThwZ6Oq9Ck\/5BrzxeFsBAAJ<\/span><\/a><\/p>\n

This not the end!<\/strong><\/h2>\n

December 5
\nI released a new beta version. One hour after that it was detected as malicious.
\nMy site was blocked again, because it contains a link to malicious software.
\nI don’t know what to do next.<\/p>\n

\"Don't<\/a>

Don’t be Evil!<\/p><\/div>\n

What do I and affected people want?<\/strong><\/h2>\n

Google must have a ticketing support system, operated by humans, to quickly fix false positive errors.
\nWe want to get a response from human, not from a robot!<\/strong>
\n<\/span><\/p>\n