<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>VentureBeat &#187; GWT</title>
	<atom:link href="http://venturebeat.com/tag/gwt/feed/" rel="self" type="application/rss+xml" />
	<link>http://venturebeat.com</link>
	<description>News About Tech, Money and Innovation</description>
	<lastBuildDate>Sat, 25 May 2013 03:40:05 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
<cloud domain='venturebeat.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://0.gravatar.com/blavatar/c6d8c27ffa1c5a7f106f97e434437baf?s=96&#038;d=http%3A%2F%2Fs2.wp.com%2Fi%2Fbuttonw-com.png</url>
		<title>VentureBeat &#187; GWT</title>
		<link>http://venturebeat.com</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://venturebeat.com/osd.xml" title="VentureBeat" />
	<atom:link rel='hub' href='http://venturebeat.com/?pushpress=hub'/>
<copyright>Copyright 2013, VentureBeat</copyright>		<item>
		<title>Massive Google Webmaster Tools security breach reported</title>
		<link>http://venturebeat.com/2012/11/28/massive-google-webmaster-tools-security-breach-reported/</link>
		<comments>http://venturebeat.com/2012/11/28/massive-google-webmaster-tools-security-breach-reported/#comments</comments>
		<pubDate>Wed, 28 Nov 2012 08:32:49 +0000</pubDate>
		<dc:creator>John Koetsier</dc:creator>
				<category><![CDATA[Business]]></category>
		<category><![CDATA[Cloud]]></category>
		<category><![CDATA[Dev]]></category>
		<category><![CDATA[breach]]></category>
		<category><![CDATA[Bug]]></category>
		<category><![CDATA[featured]]></category>
		<category><![CDATA[Google]]></category>
		<category><![CDATA[Google Webmaster Tools]]></category>
		<category><![CDATA[GWT]]></category>
		<category><![CDATA[search engine marketing]]></category>
		<category><![CDATA[search engine optimization]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[SEM]]></category>
		<category><![CDATA[SEO]]></category>

		<guid isPermaLink="false">http://venturebeat.com/?p=580928</guid>
		<description><![CDATA[<p>Google Webmaster Tools, the Google site that helps website owners manage how their site appears in Google, diagnose problems, and optimize traffic, is currently experiencing a major security&#160;breach.</p>
<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=venturebeat.com&#038;blog=342986&#038;post=580928&#038;subd=venturebeat&#038;ref=&#038;feed=1" width="1" height="1" />]]></description>
				<content:encoded><![CDATA[<p><a href="http://venturebeat.com/2012/11/28/massive-google-webmaster-tools-security-breach-reported/large_389926564/" rel="attachment wp-att-580936"><img class="aligncenter size-full wp-image-580936" title="large_389926564" alt="" src="http://venturebeat.files.wordpress.com/2012/11/large_389926564.jpg?w=1024&#038;h=768" height="768" width="1024" /></a>Google Webmaster Tools, the Google site that helps website owners manage how their site appears in Google, diagnose problems, and optimize traffic, is currently experiencing a major security breach.</p>
<p>Old accounts are being re-verified, <a href="http://www.searchenginejournal.com/google-webmaster-tools-security-breach/53098/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+SearchEngineJournal+%28Search+Engine+Journal%29&amp;utm_content=Google+Reader" target="_blank">says</a> Search Engine Journal. That may not sound like a big deal, but it&#8217;s a potential disaster for anyone who has had search engine optimizers working on their websites.</p>
<p>&#8220;From initial glance at our WMT’s accounts we now have regained access to every old account we have previously been given access to, whether that is a previous client or maybe a site that came to us for some short term consultancy,&#8221; David Naylor <a href="http://www.davidnaylor.co.uk/webmastertools-in-dangerous-security-flaw.html" target="_blank">posted</a> on his search marketing blog today.</p>
<div id="attachment_580930" class="wp-caption aligncenter" style="width: 568px"><a href="http://venturebeat.com/2012/11/28/massive-google-webmaster-tools-security-breach-reported/wow-3/" rel="attachment wp-att-580930"><img class="size-large wp-image-580930" title="wow" alt="" src="http://venturebeat.files.wordpress.com/2012/11/wow.jpg?w=558&#038;h=185" height="185" width="558" /></a><div class="vb_image_source"><span>Source:</span> David Naylor</div><p class="wp-caption-text">Google Webmaster Tools re-verifying old accounts</p></div>
<p>Hopefully, no black hats are taking advantage of special access to former clients&#8217; sites, as they could cause significant damage by uploading fake sitemaps, requesting removal of key URLs from Google&#8217;s index, re-configuring U.S.-based sites to target users in Kazakhstan, Timbuktu, or any other random place, and setting Google&#8217;s crawl rate at a ridiculously slow pace, among other things.</p>
<p>Dennis Goedegebuure, a former director of SEO at eBay, <a href="http://thenextweb.com/google/2012/11/28/serious-google-security-glitch-gives-webmaster-tools-possibly-analytics-access-to-revoked-accounts/" target="_blank">confirmed</a> to The Next Web that he had been granted access to eBay&#8217;s webmaster tools even though he left the company almost a year and a half ago.</p>
<p>I personally could not verify the problem. In former lives I&#8217;ve managed sites with millions of monthly pageviews and had access to those sites&#8217; accounts. A quick check tonight verified that I have not been re-verified for those accounts &#8212; which may mean that Google has fixed the issue, or simply that my GWT account was not affected.</p>
<p>The breach goes as far as granting access to sites&#8217; Google Analytics accounts as well, at least in <a href="http://www.stateofsearch.com/google-webmaster-tools-bug-re-verifies-old-accounts/" target="_blank">some cases</a>. That allows access to extremely sensitive information that companies and sites do not want former employees or consultants seeing or sharing.</p>
<p>Google hasn&#8217;t commented on the issue yet, as far as I can tell, and the <a href="http://googlewebmastercentral.blogspot.ca" target="_blank">Google Webmaster Tools blog</a> has not been updated since November 12.</p>
<p>UPDATED 1:03PM:</p>
<p>Google has now released a comment:</p>
<blockquote><p>&#8220;For several hours yesterday a small set of Webmaster Tools accounts were incorrectly re-verified for people who previously had access. We&#8217;ve reverted these accounts and are investigating ways to prevent this issue from recurring.&#8221;</p></blockquote>
<p>Meanwhile, Twitter is doing what Twitter does:</p>
<blockquote class='twitter-tweet' lang='en'><p>Never screw your SEO&#8230; you never know when Google will do something stupid like let them back into your Webmaster Tools account.</p>&mdash; <br />Ben Cook (@Skitzzo) <a href='http://twitter.com/#!/Skitzzo/status/273556415375872001' data-datetime='2012-11-27T22:38:26+00:00'>November 27, 2012</a></blockquote>
<blockquote class='twitter-tweet' lang='en'><p>Wonder how many evil thing are being done with Webmaster Tools right now. Best thing Google could do right now is switch it off</p>&mdash; <br />Kean Richmond (@keanrichmond) <a href='http://twitter.com/#!/keanrichmond/status/273564040725426176' data-datetime='2012-11-27T23:08:44+00:00'>November 27, 2012</a></blockquote>
<p><em>photo credit: <a href="http://www.flickr.com/photos/tashland/389926564/" target="_blank">tashland</a> via <a href="http://photopin.com" target="_blank">photopin</a> <a href="http://creativecommons.org/licenses/by-nc-nd/2.0/" target="_blank">cc</a></em></p>
<br />Filed under: <a href='http://venturebeat.com/category/business/'>Business</a>, <a href='http://venturebeat.com/category/cloud/'>Cloud</a>, <a href='http://venturebeat.com/category/dev/'>Dev</a>  <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=venturebeat.com&#038;blog=342986&#038;post=580928&#038;subd=venturebeat&#038;ref=&#038;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://venturebeat.com/2012/11/28/massive-google-webmaster-tools-security-breach-reported/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	<enclosure url="http://venturebeat.files.wordpress.com/2012/11/large_389926564.jpg?w=160" /><source url="http://venturebeat.com/2012/11/28/massive-google-webmaster-tools-security-breach-reported/">Massive Google Webmaster Tools security breach reported</source>
		<media:thumbnail url="http://venturebeat.files.wordpress.com/2012/11/large_389926564.jpg?w=160" />
		<media:content url="http://venturebeat.files.wordpress.com/2012/11/large_389926564.jpg?w=160" medium="image">
			<media:title type="html">large_389926564</media:title>
		</media:content>

		<media:content url="http://0.gravatar.com/avatar/6d4d24b12c84be6eecddf121bc3fee48?s=96&#38;d=http%3A%2F%2F0.gravatar.com%2Favatar%2Fad516503a11cd5ca435acc9bb6523536%3Fs%3D96&#38;r=G" medium="image">
			<media:title type="html">johnkoetsier</media:title>
		</media:content>

		<media:content url="http://venturebeat.files.wordpress.com/2012/11/large_389926564.jpg" medium="image">
			<media:title type="html">large_389926564</media:title>
		</media:content>

		<media:content url="http://venturebeat.files.wordpress.com/2012/11/wow.jpg?w=558" medium="image">
			<media:title type="html">wow</media:title>
		</media:content>
	</item>
	</channel>
</rss>
