Vulnerabilities / Threats
10/17/2012
06:13 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Google Helps Webmasters Disavow Spammy Links

New Disavow tool gives website owners a way to distance their sites from linkspam.

10 Best Business Tools In Google+
10 Best Business Tools In Google+
(click image for larger view and for slideshow)
Google, to some, is a kind of god. So it's fitting that Google should offer redemption to those who have fallen from favor.

Google has just introduced what it calls its Disavow links tool, a way to disassociate one's website from linkspam.

In Google's book, linkspam is a sin. Linkspam, also known as Web spam or unnatural links, is a term to describe Web links that are deceptive or manipulative. Google sees a lot of linkspam because it treats links as votes for the relevancy of the designated website. Relevant websites appear at the top of search results lists and tend to get a lot of visitors; less relevant websites starve.

Many websites looking to improve their visibility in Google Search find it easier to pay some shady search engine optimization (SEO) firm to create a deluge of low-quality content that links back to the client's site than to craft copy so compelling that Internet users create links unbidden.

[ Congress is coming down hard on Chinese telecom equipment makers. Read What Huawei, ZTE Must Do To Regain Trust. ]

Google tries to discourage paid links, link exchanges, and other schemes designed to influence its relevancy rankings through its webmaster guidelines. But not everyone does the right thing.

Attempting to manipulate Google may pay off for a while, but sooner or later, Google is likely to catch on and the punishment can be severe. Several years ago, BMW was caught gaming Google's search system and Google reduced the PageRank of the offending website to zero, effectively excommunicating it for a time.

In a blog post, Jonathan Simon, webmaster trends analyst at Google, says that the Disavow tool is intended for website owners who have been notified of a manual spam action arising from "unnatural links" pointing at their site.

The first course of action he recommends is removing as many of the spammy links as possible. But because it's not always possible or practical to get in touch with the creators of incoming links, there's the Disavow tool. It tells Google to ignore incoming links that the website owner specifies in an uploaded file.

Google stresses that the Disavow tool is an advanced option that should be used with care. "If used incorrectly, this feature can potentially harm your site's performance in Google's search results," the company says on its website.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2009-5142
Published: 2014-08-21
Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb 1.09 and earlier, as used in Mimbo Pro 2.3.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the src parameter.

CVE-2010-5302
Published: 2014-08-21
Cross-site scripting (XSS) vulnerability in timthumb.php in TimThumb before 1.15 as of 20100908 (r88), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.

CVE-2010-5303
Published: 2014-08-21
Cross-site scripting (XSS) vulnerability in the displayError function in timthumb.php in TimThumb before 1.15 (r85), as used in multiple products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to $errorString.

CVE-2014-0965
Published: 2014-08-21
IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted SOAP response.

CVE-2014-3022
Published: 2014-08-21
IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted URL that triggers an error condition.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Three interviews on critical embedded systems and security, recorded at Black Hat 2014 in Las Vegas.