# Chrome just flagged this site as malware for me

**URL:** <https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352>\
**Category:** About This Message Board\
**Created:** [May 13, 2014, 2:39pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352 "2014-05-13T14:39:19Z")\
**Posts on this page:** 20\
**Page:** 17

<div class="post-metadata">

**Author:** ![Siam\_Sam](https://avatars.discourse-cdn.com/v4/letter/s/d78d45/32.png) [@Siam\_Sam](https://boards.straightdope.com/u/Siam_Sam)\
**Post date:** [May 18, 2014, 7:34am UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/321 "2014-05-18T07:34:14Z")

</div>

> [@rsa](#):
>
> Interesting… It appears that IE is not flagging this site after all.
> 
> There are two types of Malware advisories from Google. One is initiated from the Chrome browser, the other is initiated by the so-called “blacklist” that can be accessed by other browsers.

So why did I get the warning once on IE? It’s not happened since that first time though, and it happened at the very start of all this trouble a few days ago.

---

<div class="post-metadata">

**Author:** ![Half\_Man\_Half\_Wit](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/half_man_half_wit/32/21766_2.png) [@Half\_Man\_Half\_Wit](https://boards.straightdope.com/u/Half_Man_Half_Wit)\
**Post date:** [May 18, 2014, 8:26am UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/322 "2014-05-18T08:26:06Z")

</div>

So, what’s the official word on this (I’m not sure if I missed something briefly rifling through the thread, but there didn’t seem to be more than a post regarding turning adds off, having Google re-scan, and then hopefully being erased off the list)? I’m not even seeing an announcement; you’d think that something like this would merit at least that, or maybe a mass email explaining the problems, their reasons, if/how one is actually in danger visiting the SDMB, what countermeasures to take, etc.

But it’s not the first time I haven’t exactly been thrilled by the information policy on this site, which seems to mainly be ‘lets keep our heads down till things blow over’.

And where do the ads come from anyway? I thought they were Google ads, which would make it somewhat strange if Google supplies ads it then flags as malware carriers, so I guess I was wrong on that.

---

<div class="post-metadata">

**Author:** ![jimbuff314](https://avatars.discourse-cdn.com/v4/letter/j/c57346/32.png) [@jimbuff314](https://boards.straightdope.com/u/jimbuff314)\
**Post date:** [May 18, 2014, 8:56am UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/323 "2014-05-18T08:56:12Z")

</div>

Ed’s post is [here](http://boards.straightdope.com/sdmb/showpost.php?p=17383987&postcount=273). That seems to be the latest official word.

---

<div class="post-metadata">

**Author:** ![fubbleskag](https://avatars.discourse-cdn.com/v4/letter/f/c2a13f/32.png) [@fubbleskag](https://boards.straightdope.com/u/fubbleskag)\
**Post date:** [May 18, 2014, 12:34pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/324 "2014-05-18T12:34:07Z")

</div>

just switch to paid-only to post and be done with it already

---

<div class="post-metadata">

**Author:** ![Crazyhorse](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/crazyhorse/32/31_2.png) [@Crazyhorse](https://boards.straightdope.com/u/Crazyhorse)\
**Post date:** [May 18, 2014, 2:38pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/325 "2014-05-18T14:38:17Z")

</div>

> [@scabpicker](#):
>
> Seriously, I’m not a giant fan of Google’s badsites list, but if you think that you’re safe roaming the internet without at least some of the above, you are mistaken. If you’re not minding the security of your machine, you probably should expect to be hacked eventually.
> 
> The SDMB was hit with this because they don’t have absolute control of their ad services. Almost any site that is run off of ad revenue will probably be hit by this kind of nonsense, and the SDMB was probably flagged earlier than most because it does figure highly on a lot of searches, and therefore is probably checked more often. Other ad-funded sites not being blocked isn’t a clean bill of health, it just means Google hasn’t caught them at it yet. Due to the nature of the services’ hosting, another site could be using that ad content, and Google will never know, because they didn’t check if often enough to catch it.
> 
> Like it or not, when you venture out on the internet, you’re opening your computer up to unknown inputs, all of which may leak data or allow the computer to be compromised if the unexpected cases are not accounted for. At least one of the pieces of software involved in your browsing the internet has a vulnerability that is unknown to its creator, and no one knows if someone else has discovered it. It’s yet another leap to figure out how to exploit it, but it’s almost a certainty of human logic that it exists. Therefore, you should limit the amount of executable code you allow random sites on the internet to run via some method.
> 
> People who pretend that complaining to the SDMB administration will keep them safe from malware/viruses infecting their computer are deluded. You need the kinds of protections listed in the quoted excerpt above. It’s the wild west out there.

I appreciate your input, and would like to subscribe to your newsletter.

You are mistaken in your assessment of my understanding of the situation. Try going back and reading the last, say 100 or so, threads on bad ads and malware and my contributions to them.

---

<div class="post-metadata">

**Author:** ![Count\_Blucher](https://avatars.discourse-cdn.com/v4/letter/c/c5a1d2/32.png) [@Count\_Blucher](https://boards.straightdope.com/u/Count_Blucher)\
**Post date:** [May 18, 2014, 2:42pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/326 "2014-05-18T14:42:32Z")

</div>

> [@KneadToKnow](#):
>
> See [this thread](http://boards.straightdope.com/sdmb/showthread.php?t=723313) in ATMB.

Possibly the funniest consequence of clicking that link was the following message:

The Website Ahead Contains Malware!  
Google Chrome has blocked access to [boards.straightdope.com](http://boards.straightdope.com) for now.

Even if you have visited this website safely in the past, visiting it  
now is very likely to infect your computer with malware.  
Malware is malicious software that causes things like identity  
theft, financial loss, and permanent file deletion. [Learn more]

Go back / Advanced

---

<div class="post-metadata">

**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\
**Post date:** [May 18, 2014, 2:58pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/327 "2014-05-18T14:58:55Z")

</div>

> [@Count\_Blucher](#):
>
> Possibly the funniest consequence of clicking that link was the following message:
> 
> The Website Ahead Contains Malware!
> 
> Google Chrome has blocked access to [boards.straightdope.com](http://boards.straightdope.com) for now.
> 
> Even if you have visited this website safely in the past, visiting it  
> now is very likely to infect your computer with malware…

That’s what it says, but it’s not true at the moment. And there’s the problem.

---

<div class="post-metadata">

**Author:** ![Clothahump](https://avatars.discourse-cdn.com/v4/letter/c/51bf81/32.png) [@Clothahump](https://boards.straightdope.com/u/Clothahump)\
**Post date:** [May 18, 2014, 3:05pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/328 "2014-05-18T15:05:58Z")

</div>

> [@fubbleskag](#):
>
> just switch to paid-only to post and be done with it already

Paid only doesn’t help. I’m getting nailed with the message every time I hit a new page.

---

<div class="post-metadata">

**Author:** ![scabpicker](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/scabpicker/32/8268_2.png) [@scabpicker](https://boards.straightdope.com/u/scabpicker)\
**Post date:** [May 18, 2014, 3:12pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/329 "2014-05-18T15:12:26Z")

</div>

> [@Crazyhorse](#):
>
> I appreciate your input, and would like to subscribe to your newsletter.
> 
> You are mistaken in your assessment of my understanding of the situation. Try going back and reading the last, say 100 or so, threads on bad ads and malware and my contributions to them.

I’m sorry, but I don’t feel like reading any other threads about malware delivered by the SDMB’s advertisers’ content. They seem to be pretty boring, really. Even if I did read them, it wouldn’t change the fact that if you’re vulnerable to being infected by the SDMB, you’re got a good chance of already being hacked.

---

<div class="post-metadata">

**Author:** ![Musicat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/musicat/32/20189_2.png) [@Musicat](https://boards.straightdope.com/u/Musicat)\
**Post date:** [May 18, 2014, 3:20pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/330 "2014-05-18T15:20:16Z")

</div>

> [@Clothahump](#):
>
> Paid only doesn’t help. I’m getting nailed with the message every time I hit a new page.

But you don’t stand much of a chance of getting hit by malware if you aren’t being fed the ads and you can ignore the warnings. The Chrome scan doesn’t make the distinction between SDMB accounts paid or not, yet ads appear to be the source of the malware, not user posts or admin coding.

---

<div class="post-metadata">

**Author:** ![Crazyhorse](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/crazyhorse/32/31_2.png) [@Crazyhorse](https://boards.straightdope.com/u/Crazyhorse)\
**Post date:** [May 18, 2014, 3:32pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/331 "2014-05-18T15:32:53Z")

</div>

> [@scabpicker](#):
>
> I’m sorry, but I don’t feel like reading any other threads about malware delivered by the SDMB’s advertisers’ content. They seem to be pretty boring, really. Even if I did read them, it wouldn’t change the fact that if you’re vulnerable to being infected by the SDMB, you’re got a good chance of already being hacked.

Ah I just looked at your profile. Ex-tech support. Now I understand the condescention.

I appreciate your intent if not your condescending manner of delivery, but I am quite safe thank you. And incidentally adblockers and noscript don’t protect you from everything. If it is on these flimsy protections that you rely, it is you who needs to be educated about internet security.

Mine begins with access to the internet via proxy, a modified hosts file updated daily to block any connections to or from any sites I don’t explicitly allow, an anonymized version of firefox (TOR Browser), a hardware firewall, a modicum of intelligence with regards to what sites I visit and what information I make available to them, and, finally, despite not really needing them at this point, local software solutions such as anti-virus and a software firewall.

As you say, without protections an internet connected computer will be promptly infected some way or another, but in terms of being infected by bad ads there are very few sites, with the possible exception of porn or gambling or illegal download sites, that offer a mix of malware laden ads as regularly as the Dope’s ad provider. There are plenty of ad services who are fastidious about checking the ads they deliver for safety and security, we just opted to use ones that pay a little more but offer no such protections.

---

<div class="post-metadata">

**Author:** ![andros](https://avatars.discourse-cdn.com/v4/letter/a/e480ec/32.png) [@andros](https://boards.straightdope.com/u/andros)\
**Post date:** [May 18, 2014, 3:40pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/332 "2014-05-18T15:40:12Z")

</div>

> [@chorpler](#):
>
> Nitpick: I think what he said was “humor is associated with an interrupted defense mechanism,” and later there was fan discussion on the Niven mailing list that Nessus was saying that \*laughter \*was an interrupted defense mechanism, because humor was associated with laughter.

This is why I keep coming back here. Some of you nerds make me feel not quite so damned old. Or at least that we’re all old nerds together. 😃

---

<div class="post-metadata">

**Author:** ![scabpicker](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/scabpicker/32/8268_2.png) [@scabpicker](https://boards.straightdope.com/u/scabpicker)\
**Post date:** [May 18, 2014, 4:01pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/333 "2014-05-18T16:01:45Z")

</div>

> [@Crazyhorse](#):
>
> Ah I just looked at your profile. Ex-tech support. Now I understand the condescention.

Sorry if it comes off as condescension, I don’t really mean it that way. It’s probably that I’m grumpy all the time, and reading this thread is like being at work. I’ll probably stop visiting it after this.

> [@](#):
>
> I appreciate your intent if not your condescending manner of delivery, but I am quite safe thank you. And incidentally adblockers and noscript don’t protect you from everything. If it is on these flimsy protections that you rely, it is you who needs to be educated about internet security.
> 
> Mine begins with access to the internet via proxy, a modified hosts file updated daily to block any connections to or from any sites I don’t explicitly allow, an anonymized version of firefox (TOR Browser), a hardware firewall, a modicum of intelligence with regards to what sites I visit and what information I make available to them, and, finally, despite not really needing them at this point, local software solutions such as anti-virus and a software firewall.
> 
> As you say, without protections an internet connected computer will be promptly infected some way or another, but in terms of being infected by bad ads there are very few sites, with the possible exception of porn or gambling or illegal download sites, that offer a mix of malware laden ads as regularly as the Dope’s ad provider. There are plenty of ad services who are fastidious about checking the ads they deliver for safety and security, we just opted to use ones that pay a little more but offer no such protections.

Well, we generally agree. Where we differ is our opinion on how common infected ads are. If you think it’s limited to porn or gabling sites, you’re wrong. Yahoo distributed a virus earlier this year, it’s just a matter of time before Google does it themselves. Part of my job is to look at hacked sites and see what they’re doing. Perhaps that makes me more wary of the internet in general than is warranted. But I’m sure this sort of problem extends past porn, gambling and the SDMB.

---

<div class="post-metadata">

**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\
**Post date:** [May 18, 2014, 4:16pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/334 "2014-05-18T16:16:25Z")

</div>

> [@Crazyhorse](#):
>
> As you say, without protections an internet connected computer will be promptly infected some way or another, but in terms of being infected by bad ads there are very few sites, with the possible exception of porn or gambling or illegal download sites, that offer a mix of malware laden ads as regularly as the Dope’s ad provider.

That’s a rather dated perception of where malware comes from these days. The social engineering used by malware purveyors is far more sophisticated these days. They have expanded far beyond the porn and gambling sites of ten years ago. For instance, they have found a certain demographic cannot resist rebates and coupons, so sites promising those are open cesspools of infected advertising.

---

<div class="post-metadata">

**Author:** ![Crazyhorse](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/crazyhorse/32/31_2.png) [@Crazyhorse](https://boards.straightdope.com/u/Crazyhorse)\
**Post date:** [May 18, 2014, 4:29pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/335 "2014-05-18T16:29:47Z")

</div>

> [@Fear\_Itself](#):
>
> That’s a rather dated perception of where malware comes from these days. The social engineering used by malware purveyors is far more sophisticated these days. They have expanded far beyond the porn and gambling sites of ten years ago. For instance, they have found a certain demographic cannot resist rebates and coupons, so sites promising those are open cesspools of infected advertising.

OK, ‘porn, gambling, illegal download, and coupon sites’

Bottom line is that of all the sites that I, me, personally, visit regularly or at all, the dope has by far the highest rate of bad ads.

I am well prepared to deal with them and have never opened a thread to complain about them, but as long as others are arguing that this is “just the way it is on the internet these days” I have often chimed in to offer advice about how to avoid it, and to point out that there are choices that the administration can make to mitigate the problem on their own site regardless of the state of affairs on the internet at large.

Up until a few months ago it was for the most part just your typical, occasional bad ad slipping through the cracks. A few months ago wave after wave of redirects and flash animated ads starting showing up and caught the admins here off guard as they were used to hand waving the problem away and saying things like “we’ll report this to the people upstairs but it happens sometimes…” The severity and frequency of the bad ads increased tenfold as did the threads complaining about them but it took an act of Google to bring the matter to their attention. My guess is at this point we will go with a more reputable ad service, even if all the other kids are still getting infected at coupon sites.

---

<div class="post-metadata">

**Author:** ![rsa](https://avatars.discourse-cdn.com/v4/letter/r/839c29/32.png) [@rsa](https://boards.straightdope.com/u/rsa)\
**Post date:** [May 18, 2014, 5:24pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/336 "2014-05-18T17:24:12Z")

</div>

> [@Siam\_Sam](#):
>
> So why did I get the warning once on IE? It’s not happened since that first time though, and it happened at the very start of all this trouble a few days ago.

Don’t know, but I would guess that for that one time you accessed the site from the google search page or some other search page that’s checking the blacklist. And since that first time you have accessed some other way? Or never left the site?

---

<div class="post-metadata">

**Author:** ![fubbleskag](https://avatars.discourse-cdn.com/v4/letter/f/c2a13f/32.png) [@fubbleskag](https://boards.straightdope.com/u/fubbleskag)\
**Post date:** [May 18, 2014, 5:36pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/337 "2014-05-18T17:36:31Z")

</div>

> [@Clothahump](#):
>
> Paid only doesn’t help. I’m getting nailed with the message every time I hit a new page.

Paid only would help as it would negate the need for ads at all, which are the source of the malware that has caused the site to be flagged. The issue is not specific to users who have not paid.

---

<div class="post-metadata">

**Author:** ![Bosda\_Di\_Chi\_of\_Tricor](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bosda_di_chi_of_tricor/32/16845_2.png) [@Bosda\_Di\_Chi\_of\_Tricor](https://boards.straightdope.com/u/Bosda_Di_Chi_of_Tricor)\
**Post date:** [May 18, 2014, 6:19pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/338 "2014-05-18T18:19:21Z")

</div>

> [@Clothahump](#):
>
> Paid only doesn’t help. I’m getting nailed with the message every time I hit a new page.

Me too.

---

<div class="post-metadata">

**Author:** ![hajario](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hajario/32/171_2.png) [@hajario](https://boards.straightdope.com/u/hajario)\
**Post date:** [May 18, 2014, 6:34pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/339 "2014-05-18T18:34:56Z")

</div>

> [@Bosda\_Di\_Chi\_of\_Tricor](#):
>
> Me too.

Because, as has been explained many times, Google has the site of a global blacklist. It doesn’t know or care about your personal situation.

---

<div class="post-metadata">

**Author:** ![kayaker](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kayaker/32/441_2.png) [@kayaker](https://boards.straightdope.com/u/kayaker)\
**Post date:** [May 18, 2014, 7:18pm UTC](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352/340 "2014-05-18T19:18:44Z")

</div>

> [@hajario](#):
>
> It doesn’t know or care about your personal situation.

Google may not know my personal situation, but how dare you say they don’t care. Google loves me, this I know.

[Previous page](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352.md?page=16)

[Next page](https://boards.straightdope.com/t/chrome-just-flagged-this-site-as-malware-for-me/688352.md?page=18)
