Google Blogoscoped

Forum

Google's Click-to-Call Cancelled  (View post)

Andrew Hitchcock [PersonRank 10]

Sunday, October 8, 2006
17 years ago17,692 views

That's odd. And for some reason it isn't showing up on the front page of the blog.

/pd [PersonRank 10]

17 years ago #

could you capture screen scrap of the post ??

Confirming what Andrews said!!

Ryan Wagner [PersonRank 1]

17 years ago #

I had pulled the page up and it was real. They still have a link to the post in their sidebar under recent posts

/pd [PersonRank 10]

17 years ago #

Confirming Ryan's observations :)-

http://slash.pd.googlepages.com/c2call.png

was this another hack on the blogger platform ?

John Resig [PersonRank 1]

17 years ago #

I left the page open once I saw it (thinking that it seemed incredibly suspect to begin with) – here's a screenshot for everyone who missed it:
http://ejohn.org/files/google-call.gif

zmarties [PersonRank 10]

17 years ago #

The RSS feed says it was posted by Maximal, whereas normal Google posts are posted by "A Googler". I think this is a fake posting.

/pd [PersonRank 10]

17 years ago #

A Fake posting maybe --maybe not.. note the time frames .. posted in error ??

http://slash.pd.googlepages.com/c2call-2.png

Marshall Kirkpatrick [PersonRank 1]

17 years ago #

I just saw that too, so strange it's funny

Matthew Pegler [PersonRank 2]

17 years ago #

I have noticed this happens sometimes with Google's official blog. The new post appears a few minutes or even an hour after it appears in the RSS feed. Right now, from the RSS feed on my personalized homepage, it has a link to the post, but when clicked returns a 404 error. I'd give it a few hours before considering it a post by a hacker.

-Matt

Marshall Kirkpatrick [PersonRank 1]

17 years ago #

It's especially funny given that the previous post was on security. imagine if that post had read "ok, it's final – we have acquired...

Haochi [PersonRank 10]

17 years ago #

Here's the Google Reader link for the post:
http://www.google.com/reader/shared/07148392604856193486

Philipp Lenssen [PersonRank 10]

17 years ago #

Edit: After the first comments here suggesting this may be a hack, I'm adding a question mark to the original title of my post.

Robyn Tippins [PersonRank 1]

17 years ago #

This is funny. I needed a laugh tonight.

How many times does this make for this blog getting hacked?

Will [PersonRank 0]

17 years ago #

Seems like a hack though Google Language Tools....

Christian Cadeo [PersonRank 1]

17 years ago #

The post has been taken down. Looks like it was a hack...

Sohil [PersonRank 10]

17 years ago #

I doubt Google will say "We finally consider click-to-call agreement with e-Bay a monopolistic aproach that would damage small companies in the CRM area."

Philipp Lenssen [PersonRank 10]

17 years ago #

I'm throwing this into Digg...
http://www.digg.com/tech_news/Was_the_official_Google_Blog_hacked_just_now

Scott [PersonRank 0]

17 years ago #

Any guess on which language the post was allegedly translated from? (Has anyone ever come across a reverse translation engine, which shows what a text would have looked like in the original language prior to translation?)

pokemo [PersonRank 10]

17 years ago #

why googleblog can be hacked so easily????

TOMHTML [PersonRank 10]

17 years ago #

To delete a post or how to crash Google Reader...
http://img215.imageshack.us/img215/8243/buggooglereaderhy8.jpg

TOMHTML [PersonRank 10]

17 years ago #

And on the home page of google reader, it tries to read the entry which doens't exists anymore, so I get :
"Oops!
That wasn't supposed to happen.
©2006 Google "

Danny Sullivan [PersonRank 2]

17 years ago #

Got to be a hack. Especially notice what's currently tops on the Google blog, a post all about how "Google takes security very seriously and designs all of its services and applications to protect your privacy and data security." This almost certainly is someone reading how "we keep the bad guys out of our systems" and thumbing Google's nose to show nope, they don't.

Philipp Lenssen [PersonRank 10]

17 years ago #

Google should issue a statement soon if this was a hack (as opposed to pretending it never happened).

Haochi [PersonRank 10]

17 years ago #

Suppose some anti-eBay Googler did that?

Jake's View [PersonRank 10]

17 years ago #

I'm still seeing click to call ads when i search up imacs:

http://www.google.com/search?q=imacs

Andrew Hitchcock [PersonRank 10]

17 years ago #

I was wondering if it was a hack, but I didn't want to be branded a heretic by suggesting it :). We need answers Google!

Jonah Stein [PersonRank 0]

17 years ago #

It has to be a hack.

In addition to all of the reasons stated in this thread (grammar, disappearing/reappearing):

1. An official announcement on a Sunday?
2. Click To Call is too important an emerging technology and too close to their core revenue stream for Google to abandon;
3. The reasoning that they don't want to damage small CRM companies defies belief.

Danny, any chance you can email some Google officials for a confirmation/denial?

Philipp Lenssen [PersonRank 10]

17 years ago #

Google got back to me (I'm still verifying the email sender as my question or subject wasn't included, but it looks authentic):

<<A bug in Blogger enabled an unauthorized user to make a fake post on the Google Blog claiming that we have discontinued our AdWords click-to-call test. The bug was fixed quickly and the post removed. Our click-to-call test is progressing on schedule and we are pleased with the results thus far.>>

/pd [PersonRank 10]

17 years ago #

>>>A bug in Blogger enabled an unauthorized user to make a fake

Yes, Host Overflow Application eXception vulnerability is in the wild – any blog that supports RSS and MetaWeblogAPI can be h4x0red

Sohil [PersonRank 10]

17 years ago #

Om Malik reports this is indeed a hack.

http://voip.gigaom.com/2006/10/08/google-click-to-call-not-cancelled-hoax/

Haochi [PersonRank 10]

17 years ago #

<<Official Google Block Hacked>>
Did you mean "Blog"?

Elias KAI [PersonRank 10]

17 years ago #

I was sure about it since Click to call can turn out to be more successfull for google than adwords.

Haochi [PersonRank 10]

17 years ago #

Official: http://googleblog.blogspot.com/2006/10/about-that-fake-post.html
Basically saying, "We should delete 'Our security stance'."

Philipp Lenssen [PersonRank 10]

17 years ago #

The juxtaposition of the two posts together deserves a screenshot I think... but I gotta say, very good of Google to be so straightforward & timely with this.

http://blogoscoped.com/files/google-blog-about-fake-post.png

Philipp Lenssen [PersonRank 10]

17 years ago #

> <<Official Google Block Hacked>>
> Did you mean "Blog"?

Thanks Haochi, I fixed "block" to "blog"!

Philipp Lenssen [PersonRank 10]

17 years ago #

If it's a Blogger vulnerability then 50 million pages were affected, sort of (they might've fixed this now).
http://www.google.com/search?hl=en&q=site%3Ablogspot.com&btnG=Google+Search

/pd [PersonRank 10]

17 years ago #

Oh well, actually 50 million pages were venerable to attack, does not mean that 50 Million pages were affected!!

Thats a big difference Philipp!! :)_
  
the Whitehater, did the job pretty darn well :)-

Philipp Lenssen [PersonRank 10]

17 years ago #

Yeah this hacker had a good sense of humor :)

Cristian Mezei [PersonRank 5]

17 years ago #

He could've made a much more funnier post. He was really really nice :)

Mambo [PersonRank 10]

17 years ago #

I was thinking the same thing Cristian.

I couldn't care less if Google axed C2C.

Philipp Lenssen [PersonRank 10]

17 years ago #

Danny Sullivan dug up something interesting related to a potential explanation of how the hack took place*:

<<Finally, the hacked post was published by someone calling themselves Maximal. I found a post** from another Maximal on Google Groups asking for help recently with the Google Data API.

   "Hi, I am making tests with Google Data API to publish my posts. The problem is ... my posts are being published into "the Honourable Dr Mantombazana Tshabalala-Msimang South Africa's Minister of Health" blog (I don't have to say I am not the minister of health of South Africa).

   Any help before Honourable Minister of Health of South Africa would speak with Interpol would be apreciated.?">>

* http://blog.searchenginewatch.com/blog/061009-061636
** http://groups-beta.google.com/group/bloggerDev/browse_frm/thread/bd8da9c78a32b7c4

/pd [PersonRank 10]

17 years ago #

http://www.symantec.com/enterprise/security_response/weblog/2006/10/host_overflow_application_exce.html

TOMHTML [PersonRank 10]

17 years ago #

Well done /pd, and Philipp is right, this guy have a good sense of humor :D

Dean Collins [PersonRank 0]

17 years ago #

ha ha ha.

Maybe they heard our Mexuar Corraleta application is being launched on October the 24th at Astricon in Dallas and realised their solution was last generation crap.

Check out these links for more info
http://www.mexuar.com/products_sdk.shtml
http://www.mexuar.com/products_connect.shtml#
http://deancollinsblog.blogspot.com/2006/09/mexuar-ny-tech-meetup-speed.html

Also if you haven't heard of Asterisk check out
http://www.Asterisk.org
http://www.astricon.net

or email me at www.cognation.net for more info.

Cheers,
Dean

Shark [PersonRank 0]

17 years ago #

Check this:
http://digg.com/security/Google_got_hacked_again

Mysterius [PersonRank 10]

17 years ago #

I hate it when companies are obviously replying to stuff just to get people to click on their products...

Mysterius [PersonRank 10]

17 years ago #

Oh, and I was referring to "Dean Collins," of course.

Juha-Matti Laurio [PersonRank 10]

17 years ago #

More info here:
http://www.symantec.com/enterprise/security_response/weblog/2006/10/host_overflow_application_exce.html

"The Host Overflow Application eXception appears to be a HOAX", says this Symantec Security Response Weblog entry.

/pd [PersonRank 10]

17 years ago #

Juha : correct – "hoax" was published as a POC to establish how a malicious wp plug in could easy pushed to the wp community ..

Jason Schramm [PersonRank 5]

17 years ago #

lol. Hope everyone enjoyed the HOAX. Unfortunately it came out when some real vulnerabilities have been exposed and discussed. Bad timing.

Forum home

Advertisement

 
Blog  |  Forum     more >> Archive | Feed | Google's blogs | About
Advertisement

 

This site unofficially covers Google™ and more with some rights reserved. Join our forum!