Angry website operators are complaining that Google is flagging their sites as containing malicious software when they believe their sites are harmless.
Security warnings embarrass website owners
At issue is an "interstitial" page that appears after a user has clicked on a link within Google's search engine results. If Google believes a site contains malware, the page will appear, saying: "Warning - visiting this website may harm your computer!"
Google does not block access to the site, but a user would have to manually type in the website address to continue. But owners of some websites displaying the warning are complaining their sites do not contain malicious software, and the warning is embarrassing.
"We have no bad software or installs or anything that would indicate a need to ban people from viewing our site," wrote Matt Blatchley, who works for the Greenbush Southeast Kansas Education Service Center, in a posting to Google Groups.
Google's warning page contains a link to http://stopbadware.org/, a project designed to study legal and technical issues concerning spyware, adware and other malicious software.
Stopbadware.org is lead by Harvard Law School's Berkman Center for Internet and Society and Oxford University's Internet Institute, in addition to vendor partners such as Google, Sun Microsystems and Lenovo.
Stopbadware.org said yesterday that it had received information from Google on the issue. Google makes a determination of whether to flag a website based on its own independent scans of the internet, according to a question-and-answer page.
Stopbadware.org, however, will review Google's decision if a user submits a query to email@example.com. Google will remove the page if the website is free of badware.
Organisations with websites prompting the Google warning chaffed at the appeals process. An automated email from Stopbadware.org said it would reply within 10 business days.
"We understand that this may be an incredibly frustrating situation for you," Stopbadware.org said. "However, we have found that website owners are often not aware that their sites contain or link to badware."
This could occur, Stopbadware.org wrote, if a site contains advertising from third parties that has links to other websites with malware. Also, an organisation's web server may have been hacked, or the site itself could have been hacked using a security exploit.
Organisations should work with their web hosting provider to check for security problems, Stopbadware.org said. But some object to being flagged without prior warning.
"They [Google] are the king of the internet," wrote a user on behalf of Kukars Infotech, an IT services business in Rajasthan, India. "If they rank our website on top, then they can even humiliate us."
Google officials reached in London were unable to immediately comment.