Kakkoi » Google

Google Toolbar 5 βeta

Noah Ark — Mon, 11 Feb 2008 19:41:48 +0000

Google Toolbar 5 (βeta) is out. You can download it at toolbar.google.com/T5/.

Whats New

Check out the Google Toolbar 5 (beta) youtube videos ↓

Google Toolbar 5 (beta) New Features Screencast

External Links

Google Celebrate Chinese New Year with New Festival Logo

Nick B — Wed, 06 Feb 2008 13:39:51 +0000

According to Chinese Lunar Calendar 2008 is the year of the RAT. ~Mickey 8:>

External Links

Collections of Google Holiday Logos 1999 - 2007

How to track Google Proxy Hack Duplicate Contents

Noah Ark — Fri, 01 Feb 2008 06:29:10 +0000

I’m quite surprise to see my server logs todays, Some dude decide to scrap my blog content (including my wp translations cache 100mb+ )

The Offending uri:
http://www.shouker.com/user1/baiheinet/2008/1/16/80897.html

I’d blocked the site but it wont stop the search engine crawler from indexing the content .

This is nasty Blackhat SEO methods to get the target website penalize for duplicate content on Major Search Engine. There is few solution that i found at various resources ↓.

Report to Google, proxyreports@gmail.com provide the url & the google search query.
Block the Proxy Referrer IP
Add special no index meta for unknown search engine spiders.

How to track Google Proxy Hacked Duplicate Contents

Monitor your content with Google Alerts try used a unique Search terms for your website. i.e: blog.kakkoi, myname, myunique keywords, url http://blog.kakkoi.net, base64 safe uri encode.
If you have a Google Webmaster Account go to Statistics » What Googlebot sees used the keywords as your Google Alerts search terms.
Search for copies of your page on the Web copyscape

Whitelisting Search Engine Crawler

IMO blocking the IP range of Proxy Server is not very practical. Having a Whitelist of Search Engine Crawler IP (class c) might do the trick. I’m working on a script for whitelisting search engine crawler for my wordpress. Hopefully i can finished it later this week.

Google Algo bugs

Dan Thies at seofaststart.com posts a details analysis regarding this issue, check out his post → Google Proxy Hacking: How A Third Party Can Remove Your Site From Google SERPs.

Recent Update

Caught the proxy user just after I published this articles. Its human 117.8.222.77 / c-net 117.8.0.0/13 from Tianjin, China.
The IP was graylisted on RBL & cml.anti-spam.org.cn so we send a letter to abuse@cnc-noc.net

Popular Search on Google for 2007

Deviant Ninja — Sat, 05 Jan 2008 11:19:25 +0000

All of these search keywords are most popular on Google Search (Global & US) for 2007.

iphone, wii, 24, transformer, hurricane dean, harry potter, blue ray, lost, ron paul, heroes, american idol, facebook, sudoku, borat, chris benoit, anna nicole smith, barack obama, Virginia Tech, Paris Hilton. That just some of it.

“Who is god, What is love & How to kiss” is one’s of the most popular search terms conduct on Google. Ohh it gets better “who is jesus?”.

Newsmakers

Presidential Campaign

ron paul
fred thompson
hillary clinton
barack obama
john edwards
mitt romney
john mccain
joe biden
bill richardson
rudy giuliani

Lawsuits

borat lawsuit
vonage lawsuit
iphone lawsuit
facebook lawsuit
jamie gold lawsuit
pants lawsuit
mcdonalds lawsuit
paxil lawsuit
riaa lawsuit
dell lawsuit

RIP (or rumors of)

anna nicole smith
travis barker*
vince mcmahon*
chris benoit
fidel castro*
michael jackson*
ryan sheckler*
bob barker*
criss angel*
kurt vonnegut

Fast Gainers by Quarter (U.S.)

January

chinese new year
anna nicole smith
irs

April

iphone
don imus
virginia tech

July

radiohead
pavarotti
red sox

October

vanessa hudgens
hurricane dean
tour de france

Fastest Rising

iphone
badoo
facebook
dailymotion
webkinz
youtube
ebuddy
second life
hi5
club penguin

Fastest Rising (U.S.)

iphone
webkinz
tmz
transformers
youtube
club penguin
myspace
heroes
facebook
anna nicole smith

Fastest Falling

world cup*
mozart
fifa
rebelde*
kazaa
xanga
webdetente
sudoku
shakira
mp3

ShowBiz

TV Shows

heroes
lost
house
24
bones
jericho
reba
scrubs
greek
caveman

Movies

transformers
300
the simpsons movie
epic movie
bee movie
harry potter
hairspray
cars
iron man
amazing grace

Lyrics

umbrella lyrics (rihanna)
soulja boy lyrics
bubbly lyrics (colbie caillat)

All the Rage

Console

wii
xbox
playstation 3

DVD format

blue ray
hd dvd

Television

Lcd TV
Plasma TV

Music

itunes
limewire
bittorent

Ringtones

mosquito ringtone
24 ringtone
the office ringtone
silent ringtone
crazy frog ringtone
high pitch ringtone
final fantasy ringtone
ultrasonic ringtone
transformers ringtone
spider pig ringtone

Recipes

master cleanse recipe
ratatouille recipe
lemonade diet recipe
mojito recipe
zucchini bread recipe
eggplant parmesan recipe
dog food recipe
chicken salad recipe
meatloaf recipe
simple syrup recipe

Diets

weight watchers
jenny craig
volumetrics
slim fast
atkins diet
beck diet
ornish diet
zone diet
best life diet
mediterranean diet

Fitness

pilates
bikram yoga
spinning
cross fit
zumba
kettlebells
triathlon training
parkour
bosu
gym jones

Who, What, How

Who is

who is god
who is who
who is lookup
who is jesus
who is it
who is buckethead
who is calling
who is keppler
who is this
who is satan

What is…

what is love
what is autism
what is rss
what is lupus
what is sap
what is bluetooth
what is emo
what is java
what is hpv
what is gout

How to

how to kiss
how to draw
how to knit
how to hack
how to dance
how to crochet
how to meditate
how to flirt
how to levitate
how to skateboard

Sources compile from Google Zeitgeist

External Links

Bribing Google’s Matt Cutts at Pubcon 2007

Noah Ark — Tue, 01 Jan 2008 02:50:31 +0000

Google’s Matt Cutts caught on tape selling a 1st place link in Google Search for $500K.

This is a “Just For Fun” 1 minutes video on bribing Matt Cutts at recent pubcon2007

YouTube Video

This is what Matt Cuts’s has to say about getting 1st index in Google.

No one can guarantee a #1 ranking — not even me

External Links

How to block Google Wireless Transcoder

Noah Ark — Sat, 29 Dec 2007 07:11:19 +0000

When Google Wireless Transcoder (GWT, Googlebot-mobile) translate your website it strip all “scripts” and render it in mobile format (XHTML mobile 1.0)Google version of “Mobile format”. To test this services go to http://google.com/gwt/n. GWT services is actually made for mobile-user but you can still surf with normal browser.

So what the heck wrong with it

The answer is Yes & No. This type of services is bad for webmaster that depend on ads income. Otherwise Normal Surfer would love this services as they wont need to view any ads and surf safely without “javascript embed” (from the originating website).

How to Block Googlebot Mobile Crawler

These are some server environment variables for Google Wireless Transcoder

USER_AGENT: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Google Wireless Transcoder;)
HTTP_VIA: 1.1 proxy.google.com:80 (squid)
HTTP_X_FORWARDED_FOR: xxx.xx.xxx.xxx, unknown
REMOTE_ADDR: 209.85.138.136
REMOTE_PORT: 56931

block via .htaccess

with mod_setenvif


SetEnvIfNoCase User-Agent "^Google\ Wireless\ Transcoder*" gwt_agent=1
SetEnvIfNoCase User-Agent "^Googlebot-Mobile*" gwt_agent=1

Order Allow,Deny
Allow from all
Deny from env=gwt_agent

or with mod_rewrite


RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} ^Google\ Wireless\ Transcoder [OR]
RewriteCond %{HTTP_USER_AGENT} ^Googlebot-Mobile
RewriteRule ^.* - [F,L]

Robots Exclusion Standards

User-agent: Googlebot-Mobile
Disallow: /

Google Webmaster Analyze robots.txt

After you add the above robot.txt code login to your Google Webmaster Central.

Select Tools > Analyze robots.txt
Select Google Mobile : Crawls page for our mobile index on “user-agents dropdown list”.

Embed HTML Meta Link header

Google Support

If you want to prevent Google Mobile services from transcoding your page its recommended to request for removal via Google Mobile Support form.

Soap

If google-mobile can restrict this services for mobile only view or maybe implement something like “duggmirror” for normal browsing, it would be welcome.

How to Register Multiple Accounts (MU) on Websites With Single Email Addresses

Noah Ark — Sun, 23 Dec 2007 22:58:24 +0000

You can used this technique to register on sites and forum. To name a few → digg, myspace, newsvine, 9rules, blogger & msn etc.

Gravatar sign-up process took less than 5 minute to complete and they don’t burden you with filling form chores (i.e: address, newsletter subscriptions, marketing questionnaire). So we pick Gravatar Web services for this guide.

Requirements

You must have the following email.

Gmail or Google Aps Gmail

Gmail Plus-Addressing Features

In brief, Gmail services has undocumented plus-addressing features (+) since early 2004. The plus-addressing features is mostly used for writing self notes, email filtering and mapping (google maps).

“Gmail never announce this features (beta forever) as there is no official documentation at Gmail Help Center.” — Anon

RFC 2282 - Internet Message Format

Technically, the plus sign operator is a standard URI protocol for handling Email address including telephone and fax (+tel, +fax ). This standard is maintained by Internet Engineering Task Force (IETF Network Group) → RFC 2282 “Internet Official Protocol Standards - Internet Message Format”.

The signup pages can be found at the following address ↓

http://site.gravatar.com/signup

Gmail Forwarding

Example of valid Gmail plus-sign-address code.

Below is raw header received from Gravatar for billgates+mypwned.avatar@gmail.com.

Delivered-To: billgates@gmail.com
Received: by 10.114.235.16 with SMTP id i16cs666570wah;
 Tue, 11 Dec 2007 02:13:40 -0800 (PST)
Received: by 10.100.247.14 with SMTP id u14mr17188447anh.1196668020044;
 Tue, 11 Dec 2007 02:13:40 -0800 (PST)
Received-SPF: fail (google.com: domain of support@gravatar.com does not designate 72.232.151.155 as permitted sender) client-ip=72.232.151.155;
Received: by 10.36.223.23 with POP3 id v23mf1698886nzg;
 Tue, 11 Dec 2007 02:13:40 -0800 (PST)
X-Gmail-Fetch-Info: billgates@gmail.com 1 smtp.gmail.com 995 billgates
Delivered-To: billgates+mypwned.avatar@gmail.com
Received: by 10.141.85.4 with SMTP id n4cs336075rvl;
 Tue, 11 Dec 2007 02:13:35 -0800 (PST)
Received: by 10.151.7.4 with SMTP id k4mr2609357ybi.1197368014852;
 Tue, 11 Dec 2007 02:13:34 -0800 (PST)
Return-Path: 
Received: from app1.dfw.gravatar.com (155.151.232.72.static.reverse.ltdomains.com [72.232.151.155])
 by mx.google.com with ESMTP id a13si6664003rnc.2007.12.11.02.13.34;
 Tue, 11 Dec 2007 02:13:34 -0800 (PST)
Received-SPF: neutral (google.com: 72.232.151.155 is neither permitted nor denied by best guess record for domain of support@gravatar.com) client-ip=72.232.151.155;
Authentication-Results: mx.google.com; spf=neutral (google.com: 72.232.151.155 is neither permitted nor denied by best guess record for domain of support@gravatar.com) smtp.mail=support@gravatar.com
Received: from gravatar.com (localhost.localdomain [127.0.0.1])
	by app1.dfw.gravatar.com (Postfix) with ESMTP id 50EB08F36CA5
	for ; Tue, 11 Dec 2007 10:13:34 +0000 (UTC)
Date: Tue, 11 Dec 2007 10:13:34 +0000
From: support@gravatar.com
To: billgates+mypwned.avatar@gmail.com
Message-Id: <475e62ce4f383_94b15911e666750191132@app1.dfw.gravatar.com.tmail>
Subject: Welcome to Gravatar
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8

Welcome to gravatar!

To activate your account, simply click on the link below or paste into the url field on your favorite browser:

http://site.gravatar.com/activate/666aff604f5eba8025c1

When you visit the above page, you'll be able to set your password and create your first gravatar, all for free!

If you have any questions about the system, feel free to contact us anytime at support@gravatar.com.

Tom Werner
Gravatar Founder

When gmail received the email with the plus-addressing code it will split it up as follow
- billgates+mypwned.avatar@gmail.com
- login-name = billgates
- filter-name = mypwned.avatar
And Gmail will forward the email to the login-name@gmail.com → billgates@gmail.com.

Where to start

Make sure you can received the plus-sign-address email. Try compose new email with the plus sign to yourself.

Example:
Well, assume that your email account is : leeeroyjenkins@gmail.com
So compose new email like so:

From: leeeroyjenkins@gmail.com
Send-To: leeeroyjenkins+selftest@gmail.com
Subject: Hello world
Message-Body: Over, Over, Do u read me.

That should be all. check the related links for further read on Gmail tips and documentations.

Extra notes

There is few special characters you can play with.

Period . → billgates+all.your.base.belong.to.us@gmail.com
Hypen - → billgates+chuck-norris-fans-club@gmail.com
Asterisk *→ billgates+my*space@gmail.com

Email Phishing and Spams Trends - Be wary

Avice De'veréux — Tue, 11 Dec 2007 14:09:28 +0000

Below is typical phishing email I received on Dec 8, 2007. It was send to one of my active gmail accounts.

The Email Header

From: “Gmail Team”
Subject: Gmail Warning!!!! Verify Your Gmail Account To Avoid Close.
Part of the message ↓: Dear member,

This message is from gmail message center to all gmail free account owners
and premium account owners. We are currently upgrading our data base and
e-mail account center. We are deleting all unused gmail account to create
more space for new accounts.

*To prevent your account from closing, you will have to verify it below so
that we will know that it’s a present used account.*

* CONFIRM YOUR IDENTITY. VERIFY YOUR FREE GMAIL ACCOUNT NOW !!! [...]

Raw Email Content

This are part of of the raw message on gmail its not download via pop3. Certain meta info is not available as its got filtered by gmail services (spam automatic removal).

Delivered-To random-victims-name@gmail.com
Received: by 10.114.235.19 with SMTP id i19cs230694wah;
 Sat, 8 Dec 2007 04:27:12 -0800 (PST)
Received: by 10.141.20.7 with SMTP id x7mr3231780rvi.1197116792300;
 Sat, 08 Dec 2007 04:26:32 -0800 (PST)
Received: by 10.141.115.15 with HTTP; Sat, 8 Dec 2007 04:26:32 -0800 (PST)
Message-ID: <2f83b9150712080426n4a018c86mc2af4a4ed271f223@mail.gmail.com>
Date: Sat, 8 Dec 2007 13:26:32 +0100
From: "Gmail Team" 
Reply-To: customercareteamalert2@gmail.com
Subject: Gmail Warning!!!! Verify Your Gmail Account To Avoid Close.
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_11145_31274162.1197116792293"

------=_Part_11145_31274162.1197116792293
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

 Dear Member*,* **
 * Account Alert*
***
 *
 *VERIFY YOUR GMAIL ACCOUNT NOW TO AVOID CLOSE !!!*
***GMAI L
*Dear Member*,*
 This message is from gmail message center to all gmail free account owners
and premium account owners. We are currently upgrading our data base and
e-mail account center. We are deleting all unused gmail account to create
more space for new accounts.

 *To prevent your account from closing, you will have to verify it below so
that we will know that it's a present used account.*

* CONFIRM YOUR IDENTITY. VERIFY YOUR FREE GMAIL ACCOUNT NOW !!!

 Gmail! ID:.........................

 Password:........................

 Your Birthday:.................

 Your Country or Territory:...........
 Enter the Security
Characters:......... [image: Registration
Verification Code]
*

 *Warning!!! **Account owner that refuses to update his or her account
before two weeks of receiving this warning will lose his or her account
permanently. *
**
*Sincerely,*
*Gmail Team*

------=_Part_11145_31274162.1197116792293
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Dear Member,

 Account Alert

VERIFY YOUR GMAIL ACCOUNT NOW TO AVOID CLOSE !!!

GMAI
 L
Dear Member,

This message is from gmail message center to all gmail free account owners and premium account owners. We are currently upgrading our data base and e-mail account center. We are deleting all unused gmail account to create more space for new accounts.

To prevent your account from closing, you will have to verify it below so that we will know that it's a present used account.

CONFIRM YOUR IDENTITY. VERIFY YOUR FREE GMAIL ACCOUNT NOW !!! 

       Gmail! ID:.........................

        Password:........................

       Your Birthday:.................

       Your Country or Territory:........... 

       Enter the Security Characters:.........                                

Warning!!!   Account owner that refuses to update his or her account before two weeks of receiving this warning will lose his or her account permanently.

Sincerely,
Gmail Team

------=_Part_11145_31274162.1197116792293--

They used Outlook to published this email and leeched numbers of images across different “known” web services ↓

Image Sources

Gmail Logo: Google Presskit logo

Captcha : yahoo (SSL)

Gmail Logo 2: genbeta.com (might be their host)

Header: EbayStatic Server

Whats the motiff

It may seem funny to read the message as this are pretty much a script kiddies at work. I’m sure that most savvy users will not trust this types of threat. But what most people unaware of is the “Image” portions of the message. It can play a big role for expoiting email.

QuickInfo: Spam “images” trends start around june 2006 and earlier version of popular email client (Outlook and Thunderbird) doesn’t block images by default.

If you are familliar with Internet Security in general,you may notice that there is many attemp and proof of concept method in exploiting Images like “TIFF & JPEG“. Both of this vulnurebilities exists in Internet Explorer Browser and various microsoft windows products. While we can only make educated guesses as there is no real working proof yet.

My doodling scenario produce this ↓

Session “hacker” create a malicious server side image → proxy tunnel send to multiple email server → the curious victim open the email → steal client informations (cookie or server session cookie) → spoof the request → send RST back to client (reset) → dump the victims data in one instance. → write signature on victim email (avoid loop) → propogate using victims session → new net-worm is born

Try digging around VX Heavens & milw0rm Database you’ll find something to start thinkering.

Matt Cutts Guide on Labeling Image Attributes - Search Engine Optimizations Tips

Avice De'veréux — Sun, 09 Dec 2007 16:34:31 +0000

IMG ALT attribute is one of favorites places for spamming keywords. (Blackhat SEO).

As this has been a trend lately so Matt Cutts (Google Head of Webspam Team) provide a general guide on applying “proper” ALT attributes inside image tags. Check out the video ↓.

Video posted by Ríona MacNamara at Google Webmaster Central Blog.

Firefox Freeze While on Gmail

Nick B — Tue, 04 Dec 2007 07:58:56 +0000

Recent update on Gmail has to many “Remote call” (AJAX) running (every 10secs) in the background. It will get really slow if you has a large numbers of email and spam. I’m suffering the dreaded “firefox freeze over” syndrome.

Below is a list of addons that will cause “firefox to freezeeeeeeeee”.

Firebug
Noscripts.

Its advice to disabled both of this addons or revert gmail back to older versions.

uri code to revert gmail to older versions
http://mail.google.com/mail/?ui=1.

As gmail is getting more crappy with “overload features”. I think I should start using thunderbird more often.

p/s: At this time of writing Google Aps Gmail is still with older version so you wont have this issue.

Firefox 2.0.0.12 Urgent Security Release

Kakkoi » Google

Google Toolbar 5 βeta

Whats New

Google Toolbar 5 (beta) New Features Screencast

External Links

Google Celebrate Chinese New Year with New Festival Logo

External Links

How to track Google Proxy Hack Duplicate Contents

How to track Google Proxy Hacked Duplicate Contents

Whitelisting Search Engine Crawler

Google Algo bugs

Recent Update

Popular Search on Google for 2007

Newsmakers

Popular Searches (News)

Presidential Campaign

Lawsuits

RIP (or rumors of)

Fast Gainers by Quarter (U.S.)

January

April

July

October

Fastest Rising

Fastest Rising (U.S.)

Fastest Falling

ShowBiz

TV Shows

Movies

Lyrics

All the Rage

Console

DVD format

Television

Music

Ringtones

Recipes

Diets

Fitness

Who, What, How

Who is

What is…

How to

External Links

Bribing Google’s Matt Cutts at Pubcon 2007

YouTube Video

External Links

How to block Google Wireless Transcoder

So what the heck wrong with it

How to Block Googlebot Mobile Crawler

block via .htaccess

Robots Exclusion Standards

Google Webmaster Analyze robots.txt

Embed HTML Meta Link header

Google Support

Soap

How to Register Multiple Accounts (MU) on Websites With Single Email Addresses

Requirements

Gmail Plus-Addressing Features

RFC 2282 - Internet Message Format

1. Gravatar Signup Process

2. Gravatar Sign-up with Gmail Plus-addressing Features

3. How Does It Work?

Where to start

Extra notes

Related Links

Email Phishing and Spams Trends - Be wary

The Email Header

Raw Email Content

Whats the motiff

Matt Cutts Guide on Labeling Image Attributes - Search Engine Optimizations Tips

Firefox Freeze While on Gmail

Related Posts