Vulnerabilities / Threats
10/17/2012
06:13 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

Google Helps Webmasters Disavow Spammy Links

New Disavow tool gives website owners a way to distance their sites from linkspam.

10 Best Business Tools In Google+
10 Best Business Tools In Google+
(click image for larger view and for slideshow)
Google, to some, is a kind of god. So it's fitting that Google should offer redemption to those who have fallen from favor.

Google has just introduced what it calls its Disavow links tool, a way to disassociate one's website from linkspam.

In Google's book, linkspam is a sin. Linkspam, also known as Web spam or unnatural links, is a term to describe Web links that are deceptive or manipulative. Google sees a lot of linkspam because it treats links as votes for the relevancy of the designated website. Relevant websites appear at the top of search results lists and tend to get a lot of visitors; less relevant websites starve.

Many websites looking to improve their visibility in Google Search find it easier to pay some shady search engine optimization (SEO) firm to create a deluge of low-quality content that links back to the client's site than to craft copy so compelling that Internet users create links unbidden.

[ Congress is coming down hard on Chinese telecom equipment makers. Read What Huawei, ZTE Must Do To Regain Trust. ]

Google tries to discourage paid links, link exchanges, and other schemes designed to influence its relevancy rankings through its webmaster guidelines. But not everyone does the right thing.

Attempting to manipulate Google may pay off for a while, but sooner or later, Google is likely to catch on and the punishment can be severe. Several years ago, BMW was caught gaming Google's search system and Google reduced the PageRank of the offending website to zero, effectively excommunicating it for a time.

In a blog post, Jonathan Simon, webmaster trends analyst at Google, says that the Disavow tool is intended for website owners who have been notified of a manual spam action arising from "unnatural links" pointing at their site.

The first course of action he recommends is removing as many of the spammy links as possible. But because it's not always possible or practical to get in touch with the creators of incoming links, there's the Disavow tool. It tells Google to ignore incoming links that the website owner specifies in an uploaded file.

Google stresses that the Disavow tool is an advanced option that should be used with care. "If used incorrectly, this feature can potentially harm your site's performance in Google's search results," the company says on its website.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading, September 16, 2014
Malicious software is morphing to be more targeted, stealthy, and destructive. Are you prepared to stop it?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-6646
Published: 2014-09-23
The bellyhoodcom (aka com.tapatalk.bellyhoodcom) application 3.4.23 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2014-6647
Published: 2014-09-23
The ElForro.com (aka com.tapatalk.elforrocom) application 2.4.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2014-6648
Published: 2014-09-23
The iPhone4.TW (aka com.tapatalk.iPhone4TWforums) application 3.3.20 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2014-6649
Published: 2014-09-23
The MyBroadband Tapatalk (aka com.tapatalk.mybroadbandcozavb) application 3.9.22 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CVE-2014-6650
Published: 2014-09-23
The NextGenUpdate (aka com.tapatalk.nextgenupdatecomforums) application 3.1.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Best of the Web
Dark Reading Radio