GigaOM

Some other people noticed too, but right now it is back.

Wow, this is amazing. Google being hacked means that we’re all basically screwed from any type of security on the web. I would like to know what really caused this, though. Hopefully something like this won’t happen again.

gmail is still out

Google hacked!

Oh, the humanity! Seriously, Google has been offline for like two minutes, and I feel…

well, the dns was down becouse google was visitable with http://216.239.39.99/

Too funny, the sky is falling, the sky is falling. Hey maybe they had an internal problem or there DNS servers got hosed. Who knows.

This should be interesting, I wonder ‘if’ google was ever hacked, would they come out and admit it? There must be a emergency meeting going on as we speak with their PR people hehe.

An issue of changing DNS from a service to a home grown solution is my third-hand knowledge, eavesdropping on a friend’s phone call to employee.

Why…

It was more like 1/2 h not only 2 minutes and it affected most if not all regional sites as well (.co.uk, .es, .nl, etc)

Holy HELL. I noticed gmail was down, but damn…I can’t believe it was hacked.

DNS poison != Google hacked

Two different things.

Google Down?

Google was down for a brief time and there are reports that the site was in fact hacked.

Google hacked!

Mighty Internet giant Google was humbled this evening by a hack attack! As reported below,…

A Trio of Google Items (Plus Another!)

One: Fred is at it again, sharing his AdSense data. This time I think he did in fact violate AdSense TOS. Not in saying AdSense Image ads suck, but in providing click through rates. Hawk comments here. Two: Google’s Web Accelerator is turning into so…

Damn, I just power cycled my modem and then called Comcast to tell them my internet is down – now I feel stupid

Was Google Hacked?

It looks like someone or some group is not happy with a well-known search engine located in Mountain View, California. Earlier this afternoon, Google Blogoscoped reported that Google was down. Nice catch (as always ) to P.L. Then, Om M….

Apparently, the myDoom virus rearead it’s ugly head again today and flooded googe and gmail with crap. Wy wifes hotmail account, which rarely gets email at all, got 150 infected emails today, so this is confirmed.

What happened to Google

That screenshot is clearly faked - look at the address bar, it still shows the google logo, at the left of the address, this is a line of HTML that changes that image, now would “sogo” or whatever balls it was, really use the google logo?

Sogo is really http://www.sogosearch.com

It’s not a codename for a hacker.

Google Hacked

Wondered why I couldn’t get my GMail for a while…

Om Malik reports on the Google Domain Hijacking.

well seriously .. if they were hacked then the hacker didnt do a very good job. i can access gmail and i can use google plus that screen could’ve been taken when they were in the first steps of taking over google

no problem with google here at this time

I noticed that http://www.google.com.net/ redirects to that sogo place. Could this be a result of your browser doing a “best fit” sort of deal when google.com was down? I know Firefox tries to find the best site when the one you enter is wrong, not sure about Safari.

This article made me remember an article I read last week in a national IT-magazine, in which they pointed out some of the dangers facing the current Domain Name System (DNS). The article was mostly based on information from a report by the National Research Council.

A prepublication and more information on that report can be found here:
CSTB Publication: Signposts in Cyberspace: The Domain Name System and Internet Navigation
and
Nat’l Academies Press: Signposts in Cyberspace: The Domain Name System and Internet Navigation

To which I must admit not having read anything but the summary myself.

Folks, well got an update from Google folks who did clarify and said that there was a DNS glitch. Not a hack. my apologies for an alarmist headline, but it was clear something was up.

I noticed that http://www.google.com.net/ does in fact go to the sogo search site and also that http://www.sogosearch.com/ is the same as the google.com.net site. Maybe it was some type of hack and it’s not like anything is “hack proof”. There will ALWAYS be a way to break through firewalls. Even with the best encryption it’s still possible to penetrate.

Here’s another screenshot:

http://img179.echo.cx/img179/7959/googlehacked7to.jpg

If Google is telling the truth, then this post must be a lie?

http://hbarbobot.kicks-ass.net/?p=42

$ whois google.com
Whois Server Version 1.3
Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http://www.internic.net
for detailed information.
Server Name: GOOGLE.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM
IP Address: 80.190.192.24
Registrar: KEY-SYSTEMS GMBH
Whois Server: whois.rrpproxy.net
Referral URL: http://www.key-systems.net
Server Name: GOOGLE.COM.HAS.LESS.FREE.PORN.IN.ITS.SEARCH.ENGINE.THAN.SECZY.COM
IP Address: 209.187.114.130
Registrar: INNERWISE, INC. D/B/A ITSYOURDOMAIN.COM
Whois Server: whois.itsyourdomain.com
Referral URL: http://www.itsyourdomain.com

Yeah, GooGlE WaS HACkEd. Jesus christ, you guys are morons.

It appears this is nothing more than your DNS server f’ing up. Apparently, your side of the world must’ve been redirecting to SoGoSearch for some reason - I (in Michigan) only got an error message saying that Google.com couldn’t be found.

I’ve noticed that all the screenshots are on OS X.

I noticed this on my OS X box, but not my windows box (when google started responding again) and flushing dns brought back the normal google

Some browsers redirect to a generic search page when the domain you typed in couldn’t be found (for example, because of a DNS error). This could be how people started seeing ‘SoGoSearch’ and ‘MSN Search’ pages.

In response to Brendan Loy: The existence of amusing subdomains of gulli.com and seczy.com doesn’t mean Google was hacked. It’s just a joke by the people who own those domains.

From what I’ve seen here, I see no reason to believe that Google was hacked. It just looks like a DNS screwup. “Never attribute to malice that which can be explained by incompetence”, and all that.

As far as the whois stuff goes, look closely. The entry for GOOGLE.COM is still there and intact. Somebody did manage to get in newer entries that include the substring “GOOGLE.COM” and thus also show up on a basic search, which is bad, but that has nothing to do with Google itself. -m

They hacked google because it finds less cracks and pron then other sites. LOL

Was Google Hacked?

Google says no, that it was just a DNS glitch. Then why was there another search engine showing up? This one demands an in-depth press release, I’d say. Google Hacked? No DNS Glitch says Google [GigaOm]…

MyDoom, MyDoom, MyDoom

Google Disappeared for a While on Saturday Due to DNS Issue

At around dinner time on the East Coast, my wife Kathleen called from Harrisburgh, PA. She and her sister Mary planned a weekend away for the two of them and were looking for directions to a movie theater. I tried…

I had sex during the downtime.. If its last downtime.. when will I have sex again? ;)

Anyone with half a brain and access to more than one DNS server could tell you that Google wasn’t hacked. It’s people like you that give tech support such a hard time with the stupidest problems. Before you jump to conclusions next time … fire off at least 2 synapses before you open your mouths.

This is the 3rd time that ive seen this happen is just the first time its been picked up on. Kinda interesting…….. but i wouldent worry about it, I think the DNS has a routing problem becuase of the number of times ive seen this. Also its never lasted more and 1:30 minutes for me anyway.

Hmm… Interesting that in the initial post here, Google gets a capital G and GOD gets a lower case G. Certainly Googole isn’t the new mesiah :)

While this probably isn’t the case with the Google incident, New Scientist published an article describing how a malevolent hacker can essentially “poison” the dns system locally, then potentially regionally, and so on forth, to have a domain name point to a different IP address. Essentially this problem with google could happen in such a manner.

Here’s a link to the article from New Scientist:
http://www.newscientist.com/channel/info-tech/dn7299

whoops, sorry for the slight redundancy. I checked above previously and didn’t see mention of the article or dns poisoning. After reading through the comments more thoroughly I see that Bruce posted some articles that appear similar in concept. Hopefully the article I listed will help with further elaboration.

So, Does anyone else think Bill Gates had something to do with this? Gotta love a good conspiracy theory =8-)

Global Google Server Down

Google.com and all of it subsidiary sites were down for at least 15 minutes today.

Google Hacked?

Did you happen to notice that Google was having some difficulties today? Here’s what some people saw when they tried to go to Google.

Gigaom.com has more screen shots and information.
…

Just a guess, but perhaps with http://www.google.com returning NXDOMAIN the gethostby* functions tried variations and ended up resolving sites like http://www.google.com.net which inadvertantly sent people to the spoof site.

Probably not a hack, just an interesting coincidence :)

google wasn;t hacked

it wasn.t dns.

it was a testing of “how many will talk”

PR

they are creating chatter and attention,,,

Google is down

Google (NOT) Hacked? Just A DNS Glitch says Google More Information Google Hacked?…

Google hacked?

Saw this story on Gizomodo and Om Mallick’s blog.

Everything seems to be fine now, but the Whois records for google looked really wired.

Here is the screen shot from directi.com whois:

Google says its a DNS issue, but i feel that the domai…

The world stood still…

So I’m sitting on my laptop scanning for viruses, spyware, monitoring packets, tracing routes…I rebooted my computer, checked my plugins and program list. Google can’t be down, I said. That doesn’t happen. I guess it did. In my neck of the woods, …

Thats really strange, We at Adsense publishers must have lost few dollars for all this issue. But one thing is sure, sogosearch has got a lots of publicity from all this issue.

Blogging about Blogging !!

The sky came down. Well, not exactly. None ever knew how it was to have Google go down for a few minutes or getting hacked. All this and more happened today evening at 3:00 pm PST to 6:00 pm…

Folks the site sogosearch own the com.net dns record

they are using the *.com.net domain to catch dns queries from .com sites that people type incorrectly or the dns lookup fails, their internet explorer starts appending suffixes to the name to try and locate a site, they have a record for the name google.com.net so when a google.com lookup fails internet explorer trys adding .net to the end and finds the wrong site

doesnt take a google genius to figure this out

So it wasn’t just me…

So I was working on GPack, extending Mail::Webmail::Gmail and otherwise reverse engineering GMail when I suddenly lost all contact to…

Angst um Google Domain

Heute Nacht war Google nicht erreichbar und Besucher wurden zu verschiedenen Websites weitergeleitet. Und die Welt stand still am Abgrund des Internets, in welchen bereits Google hinabgefallen war und es nur noch eine Frage der Zeit war, bis wir Google…

Google mit DNS-Problemen

Google hatte offenbar in der letzten Nacht ein DNS-Problem, das nicht nur die Suchseiten, sondern auch die Adsense-Anzeigen betraf, die nicht mehr ausgeliefert wurden. Dies führte zu wilden Spekulationen, ob Googles Domains einem Hijacker zum Opfer fie…

The second screenshot (http://img241.echo.cx/img241/6208/googlemsn3lp.png) is clearly a bad fake.
First, putting an URI in the adress bar and hitting enter (or pressing Go) would append a solidus (slash) at the end of the URI.
Also, the icon at the left of the adress is semi transparent. This indicates that no one have pressed either enter or Go yet (try that in Firefox and you’ll see.)

I work in google’s department for west europe.
It was hack indeed.
Nothing more to say. If you need more informations.. email me.

Google’s not lying when they say they weren’t hacked. But calling it a DNS “glitch” isn’t entirely honest.

While the DNS server I used that was affected, I looked at the source of the SoGoSearch page, which was different than the source if you browsed to SoGoSearch in the address bar. The difference?

The “hijacked” version had:

as a comment instead of

Ok, so a script is pulling that in. :P

Seriously though, the DNS I used for my PSP Browser portal was wonked, but when I switched back to Comcast’s default DNS servers, everything was fine. Still sounds like a trunk’s DNS was maliciously altered. How could a few get the wrong record and everyone else get the right one?

Google hacked or not?

Engadget.com is reporting that for a short period of time, Google was not available today. That is quite serious, what…

DNS is the first thing I thought of when I heard about this. And then I came here and saw a screenshot of a search engine. Now that’s an interesting coincidence, isn’t it? :)

It could be DNS or even virus kind of stuff … just see old stuff http://www.google.com/googleblog/2004_07_01_archive.html

It was not a hack… Some browsers try adding some common prefixes like .com, .net when a domain name does not resolve.

When http://www.google.com could not be found, it tried http://www.google.com.net (try going there) which seems to have been setup just to catch this type of traffic.

American Express sponsors the SOGOSearch site !
A credit card company gone to the dark side ….

did anyone bother to tell nslookup to use googles SOA server and then have a look at how google.com resolved?

if it resolved to the ‘mysterious other site’ than technically google got hacked.

if say comcast’s nameserver(s) was misdirecting and googles wasn’t, tan it’s comcast wot got hacked…

it’s not rocket science…

As well.

I hope you guys realise that some of the screenshots are possibly faked. I can easily fake them myself (goto another site and then change the address bar)
For example the Google MSN (http://img241.echo.cx/img241/6208/googlemsn3lp.png) you can see that the server it is trying to access is search.msn.com, I know that this may be for pictures but who knows, maybe has been a hoax. I know that not all of them are fake, but I’d think if the DNS stuffed up it wouldn’t redirect you to lots of different sites, rather just one (SOGO in this case)

Tim

There was no re-direct but an error message…we use http://www.google.ca in Canada and wouldn’t fly…tried gmail and got page could not be found errors.
Didn’t have too much time but a whois on google.ca appeared to direct to google.com: which is likely the problem domain.

Sogo is a big department store in Indonesia.

Was google hacked by an Indonesian Crack SpecOps?

> fire off at least 2 synapses before you open your mouths.

Pleasant fellow, isn’t he?

Shoot the messenger reflex. what can you say…

i kept getting the http://www.com.org whenever going to google, gmail, froogle, etc…

Google gehacked?

Om Malik:

Looks like we are having a Google outage - apparently someone has hijacked their Domain, and something called SoGoSearch is showing up instead.

Google DNS Problems

New.com, OM Malik and others report that Google experienced a 15 minute global DNS outage yesterday, causing a redirect to http://www.google.com.net instead, which led consumers to believe hacking had taken place. It’s a matter of concern that a comp…

The ‘dead Google air’ I hit didn’t refer, it just seemed to ‘hang’ during the lookup. Damn, I pinged the domain name, but didn’t ping the IP! If someone did they could probably clean up this DNS ‘hijack/poisoning’ thing!!!

I had noticed a large UK PC sales group suddenly went ‘off air’ to-day. Later announcing that they were upgrading… 5 hours later too, ermmmm?!

Wierder things have happened.

Yup, noticed it as well. Got back from running errands, opened browser and bam… no Google. Thought it might have been Comcast, but using other some friends’ computers resulted in the same thing. :/

Kinda hit home how centralized/dependant many services are on Google. Of note is Adsense… I checked out a few dozen pages and all of them had Adsense missing during this time.

The fact that almost all of Google’s primary services are based on the *.google.com domain allows for this kind of “one hit affects everything” situation.

Hopefully, Google will come up with a way of avoiding such future disturbances.

Wing
http://www.polygon-comics.com

I was redirected from google.dk to http://www.www.google.com.org/

More on yesterday’s Google outage

GigaOm explains the strange screenshots: Multiple experts say that the screen grab I got was…

they are using the *.com.net domain to catch dns queries from .com sites that people type incorrectly or the dns lookup fails, their internet explorer starts appending suffixes to the name to try and locate a site, they have a record for the name google.com.net so when a google.com lookup fails internet explorer trys adding .net to the end and finds the wrong site

If it’s a wildcard, then how come http://www.google.com.net/ takes me to SoGo, but http://www.yahoo.com.net/ does not, nor does http://www.cnn.com.net/ or http://www.brendanloy.com.net/ or any other replacement for the “wildcard” that I’ve tried?

How Much Did Google Outage Cost?

After we reported the Google problems yesterday, David Krane of Google, pointed out that the outage was for about 15 minutes or so. Given that the company had sales of $1.256 billion in the previous quarter, or about $581,481 an hour, apparently the co…

Google goes offline

Web Accelerator Goes Offline, As Does Google (Briefly)

Google has shut off access to it’s ill-fated, ill-received Google Web Accelerator (GWA). Unlike a few days ago, when it appeared Google was redirecting people from the GWA page to the Google Toolbar page, it looks like Google’s found a…

google can never be hacked , probably there was DNS problem or there was problem with all the PC’s that uses GOOGLE….

Well looks like sogo are getting a shitload of free publicity!!
hmmm, could just have been an error in their favour tho! Shame is slept through all of this! would have loved to watch it unfold and have a go at working it out.
:)

Okay, I ‘watched’ this happen, by monitoring my DNS cache.

Google (or whoever manages their DNS) screwed up - http://www.google.com is a CNAME pointing to http://www.l.google.com. Entries for http://www.l.google.com took a walk for perhaps 30 minutes, making http://www.l.google.com return NXDOMAIN.

SoGo (or whoever owns .com.net) have a specific A record for http://www.google.com.net, to catch people who can’t get to Google for some reason, and use browsers that do the incredibly stupid thing (Safari?) when they can’t find a domain. This “paid off” for them when Google decided to take a walk from the Internet for those few minutes.

No foul play here, unless it was an inside job, at which point it wasn’t a very sensible one.

Estimation on revenue lost from recent Google DNS blackout

Due the recent Google DNS Blackout, someone guesstimate how much advertisement revenue they lost from search results:

… Q1 2005, Google cashed $657 million by showing sponsored links on search results. This means 300,000 US$ per hour. Taking int…

Google hacked?

Internet Ein Anonymer Feigling schreibt: “Heute Nacht wurde Google gehackt. Die Seite wurde kurzzeitig ver舅dert und war dananach kurz offline” und verweist auf einen Blog-Posting von Om Malik.Was wir hier im IRC mitbekamen, war haupts臘hlich ein v…

I don’t think so, Google hack is fake. I agree, in the address bar of sogo screenshot, it still shows google’s logo!!
This is a hoax by who knows, microsoft?

The logo is still in the window because Safari/Firefox tends to be a bit slow in updating icons. They don’t always look at the icon apparently. It is not a faked image, people, it is a simple bug in Firefox/Safari that I’ve experienced since 0.8 ;)

By the way - I doubt Microsoft feels Google is a threat to them. Google is a search/steal your privacy company, not a screw-yourself company ;). Microsoft has no need to feel threatened by Google, except in terms of MSN Search / Hotmail.

Check out
http://www.google.net.com/

[...] Google Hacked? O Google foi hackeado? Ou foi um problema de DNS? O fato é que no sábado quando eu abri meu Firefox, dizi [...]

[...] to Google Down”> Google Down 9/05 1823 Google WAS down on Saturday…I thought it was weird No Comments yet [...]

I m not a techie so dont know much except the basics but at the moment i cant reach the now-so-famous google.com.net !!!

[...]   Next:  What Caught My Eye This Week? Ending May 13th Google (NOT) Hacked? Just A DNS Glitch says Google Google Says DNS Issues Caused Outage The Goo [...]

[...] recently tried to get on Google and noticed that the site was down. Then I found out that Google had a DNS Error. Source: mrmiscellanious from the G4tv forums Phatlip12 aka Kyle Techspec [...]

cool

google hacked and Kylie Minogue got Breast cancer.

As of 07:28 EST google.com is still not reachable via domain name.
Using the URl I am presented with the Firefox logo and nothing esle on the page. Yes I can get to google using one of it’s ip addresses.
DNS problem still in effect?

6-4-2005. 1PM PST. Gmail is down. Server Error (500)

So are we seeing the first cracks in the zillion of cheap servers technical approach?

I believe one or more competing SE/portals use specialized storage with dual parity RAID (”RAID DP”) to ensure data availability (treating customer data like a Fortune 500 compnay treats its corporate records)

Or is this another DNS issue?

I imagine the zillion-cheap-server-grid is pretty darn complex.

Anyway, don’t bother to e-mail (gmail) me until it’s back up!

Screen shot of gmail down

It’s a 502 error.

Nobody can hide anything on the Net…

I am still having problems with google as for gmail is totally out

apparently there were some gmail issues in recent week. it was a problem localized to some users. seems like it has been fixed.

[...] planeta es este?

Martes, 07 de junio de 2005

Qué pasa con Google
No han sido Hackeados, pero yo por lo menos desde esta mañana no puedo entrar al corre [...]

my computer was fine exept for gmail which i have by the way

Hi all,
this is off-topic … I have met a serious problem: when looking for ANYTHING searching in http://www.google.com, I obtain the ONLY reference to ncc.sex-explorer.com. How can I get rid of this property?
Interesting is, that when trying e.g. http://www.google.sk, I have no problems.
If anyone knows, where is the problem, please, send me a mail.

I’m glad I stumbled on this topic..explains why I got the same error as many of you pointed out with Google. Can you say free publicity?

Search for VoIP Coming Up Short

Om wrote that Google was experiencing some technical difficulties and as far as I can tell they still are. When I search for “voip” today I get 1-10 of 10 results, it should be more like 1-10 of 5,000+ results….

google needs to buy XTEN then starts voip with free pc tp pc calls and 2c per mi for landline.

HELP!
My google is different, you can’t do image search, or any of the others, and the number of pages is different and it looks a bit strange. Their is no “im feeling lucky”. It hink someone HACKED MY GOOGLE

I didn’t get the same thing you guys did. I got a string of code that had the web page http://www.yousendit.com listed in it. Is that the same thing or did I see something different

I didn’t get the SOGO page. Yesterday a couple of friend and I discovered it at about 4:10 CST. The Source code was not at all like it should be. It was asking you to type in the code that displayed in the “picture.” No javascript however was present in the source code. The image search, new, etc worked fine. It just effected the search page. It said something to the affect of ” your computer has been infected etc.” If that were so and Google had made this page, then it would not be like this on every computer in our server room, and also the prompt would come up in the image search as well.

I think that we were one of the first to discover this, because we went to every single forum (geek forums) but nothing was reported. Anyways has this affected any one else.

visit http://www.apexbug.com for more info on google hacking.

anyone get that google.com gets you to sogosearch but google.ca still works fine?

THAT SITE IS SLOW, THEY ARE NO GOOGLE, THAT IS FOR SURE!!!!

http://www.pbxinfo.com

I had a problem that was sort of like yours. I wasn’t able to open some sites. I kept getting the DNS error. I finally found this and it fixed it. http://www.fixieonline.com/pagefix

Hey people,

this is not due to any hack or something. This is just child name servers created at the Registry.

When you query internic’s servers for the whoisof the domain name, internic performs a domain.com.* query and that is the reason this thing shows up. You can check the same for hotmail.com, yahoo.com.

Ifyou have a domain namme abc.com you can go ahead and register a child name servers which says google.com.i.dont.own.that.abc.com and this should also show up in the whois search of google.com. So just a wrong way to query used by Internic servers!

Hope this was a little helpful to you guys.

PJ
http://www.pratikj.info
http://www.port43whois.com

Google via IP address works today, but for us (apparently just us), am getting either:
Index of /

Name Last modified Size Description

[DIR] Parent Directory 21-Dec-2005 15:05 -
[DIR] cgi-bin/ 21-Dec-2005 14:20 -

Apache/1.3.34 Server at http://www.google.com Port 80
—————————–
…or getting a web hosting company apparently called “computersteroids” (when typing in “groups-beta.google.com”). Whose DNS files are bad and whose are good?

Im getting it today for the first time. Seems like they still have this so called glitch

I haven’t been able to access Gmail homepage, Hello download page, Yahoo sign-in page, Hotmail sign-in page, eBay sign-in, etc., for two weeks now despite following every “fix” out there. Just goes to a DNS error page. Still can backdoor onto Yahoo by signing in on the Photos link. I wish someone could fix this…

7.38 pm in Australia and google is still screwed,all my sites are not showing addsense ads,a search using google.com yields a blank and the addsense code generation page is a shambles.

[...] Om Malik´s Broadband Blog hat das Protokoll der Ereignisse engadget bericht technorati cosmos [...]

k

Maybe it was just poison in _your_ DNS cache?

It is possible to poison DNS records. If a particular region is having problems, it seems likely that that region or a specific ISP’s DNS was poisoned. It seems unlikely that only a single specific LAN’s gateway was poisoned, except maybe for practice before attacking the regional DNS.

Maybe it was just poison in your DNS cache?

Um, it just happened to me at 1 AM June 27th, I typed in http://www.google.com and got this:
http://www.sogosearch.com/?mysearch=google&skn=Jungle

…why the hell did that happen!!?? I thought I had a virus until I found your blog about it here…

When I reading a message in google earth, I recived a message on a IRC net to visit a page. This page have a troyan, so I think that when you read your mail, this people don’t have more, but your IP, and use this information, to try an attack over your computer. I don’t know how this people have this information, but it could be, this dns server in troubles.

Bye from Spain.