[nsp-sec] Multiple Google Phishing pages

[Peter Moody]

On Fri, May 25, 2012 at 1:16 PM, Chris Morrow <morrowc at ops-netman.net> wrote:
> ----------- nsp-security Confidential --------
>
>
>
> On 05/25/2012 04:06 PM, Allen, Brian wrote:
>> ----------- nsp-security Confidential --------
>>
>> Hi Googlers,
>>
>> We got many complaints about two phishing forms targeting our university
>> yesterday which are still up.  Would you please investigate?
>>
>> One question: Does the number of unique clicks on the "Report Abuse" link
>> have an effect on the timeliness of getting the pages down - namely, if I
>> can educate more of our users to click on that link, will the page get
>> taken down sooner?
>
> I'm not sure if the 'more clicks matters' as much as 'more than 10
> clicks' (ten is made up here) matters ("There is sufficient cause to
> close this after X people click" - my guess).
>
>>
>> https://docs.google.com/spreadsheet/viewform?formkey=dHJIbWRBNDBYUG1RMkQ0LV
>> pGRDBrUlE6MQ
>> https://docs.google.com/spreadsheet/viewform?formkey=dHpWNjBRWl82RjZtRUFmQV
>> ZpakpmZEE6MQ
>
> hopefully pmoody isn't off in some far-off-land ... he's a bit closer to
> the 'make this fixed now!' people.

I actually was in some far off land (I suspected that it would be a
bad idea of the first degree to check work email from my honeymoon, so
I didn't).

the first form appeared dead when I just checked. the second form
should be dying a fiery death shortly.

-- 
Peter Moody      Google    1.650.253.7306
Security Engineer  pgp:0xC3410038