Google tricks & Other Tutorials

As of today (6 January 2009), Google has been ranked as the third worst "spam service ISP" by Spamhaus.org.

Besides not doing enough to stop dodgy drug companies redirecting unwary consumers through Google Docs, the company has been serving as a major host to those intent on committing advance-fee fraud (one example being the "Nigerian" or "419 letter"), mule fraud (in this case, setting up an email account as a fake "intermediary" or escrow service to dupe an unsuspecting punter), and excessive spamvertising through its Gmail and Blogger services.

No respectable ISP wants to be seen as pro-spam, but the fact is that some companies permit spammers and scammers to operate through their networks. Simple greed could be the motive, or it could be that some companies simply are not targetting their resources effectively to minimise the abuse of their networks.

Microsoft used to be a regular visitor to Spamhaus's dubious top ten, but they seem to have sorted themselves out. According to Richard Cox of Spamhaus, "Microsoft got rid of the bad guys, and off they went to Google, which is now hosting a lot of the stuff that was on Microsoft's domains."

Google, it seems, has a way to go.

[get this widget]

To assist web developers, browser engineers and information security researchers further, Google has released a Browser Security Handbook. This handbook is meant to furnish a one-stop reference to key security properties of contemporary web browsers. Google has commented: “Insufficient understanding of these often poorly-documented characteristics is a major contributing factor to the prevalence of several classes of security vulnerabilities”.

The Browser Security Handbook covers almost all the browsers available, e.g. Microsoft Internet Explorer, Mozilla Firefox, Apple Safari, Opera, Google Chrome as well as Android embedded browser. The content of this handbook is generally divided into three main part: “Basic concepts behind web browsers”, “Standard browser security features” and “Experimental and legacy security mechanisms”. It has also included many practical examples for downloading.

Direct Link:
Browser Security Handbook
Test Cases