Need something highlighted? Email me!

Subscribe to Orkutsphere Chatter

Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

Monday, June 18, 2007

Stolen Orkut Forums, And Ways To Get Them Back

Note: Thanks to Ajay Choudhary for reminding me to post this.



So lets say you started a forum on Orkut, and to your surprise, many people are not only joining your community, but inviting their friends as well. Your forum blossoms into the thousands, which you continue to monitor and promote.

Then one day to your horror, you discover that somehow someone else has taken over your forum. What do you do?

There are two methods that of securing your Orkut forum (actually there are three but the third involves hacking which I WILL NOT discuss here, so don't ask). I have witnessed others using both of these, and I suggest users give them a try to see whether or not they are effective.

<-----------------Method One----------------->


Since everyone loves stories (at least I do which is why I like movies) I'll retell this event that I saw online. Note: Names have been changed in order to protect the innocent guilty those involved.

<---Story Time!--->


A girl names Shekut started a community called The Fun Forum (not its real name, but you get the idea). Shekut ran the forum for awhile, but the community grew too large for her to manage.

She then passed on Admin powers to Hekut, who took over The Fun Forum, while Shekut retreated back to the real world as Orkut was taking up way too much time.

Later on when Shekut returned to her community, she discovered it in the hands of Hackut. Now Hackut had through "brute force" acquired the forum from Hekut, claiming he was saving it from deletion by Hekut.

Hekut disagreed and claimed that Hackut was a liar (as well as a loser) and decided with the help of several friends to use their hacking powers to reclaim the forum by force. Unfortunately Google was in another round of purging hackers from Orkut, and Hekut and his gang were booted from the system.

Shekut and other members of the forum were upset about this, and tried to appeal to Google for help. Unfortunately since Shekut originally gave the forum away to Hekut (who was now banned), Hackut's authority of the forum ran unchallenged.

Darkut (that would be me) was contacted regarding this situation, but since Darkut did not work for Google, there was nothing Darkut could do legally.

Shekut then began to contact members of The Fun Forum to petition Hackut to return the forum back to Shekut. Members contacted Hackut through his scrapbook, his email and within the forum and (to my surprise) Hackut decided to give back the forum to Shekut, resulting in much celebration within The Fun Forum.

<-----------------End of Method One----------------->


As you saw in the above example, you can sometimes reason with the person who took over the forum to return the community back. In this case, that was the only alternative Shekut had, although others have used it to retrieve stolen forums, and it the person has a kind heart this method doesn't take too long.

But lets say the person who stole the forum is Jerkut, instead of Hackut, and he doesn't care for whatever particular reason. Here is a second (and faster) way of getting your forum back.

<-----------------Method Two----------------->


If your community has been hacked, and the person who dethroned you is unwilling to give it back, here are some necessary steps that should help speed up the process of reclaiming your forum.

  1. Contact Google: You need to alert Google about this situation, by contacting them over here.

    Make sure you include as much information as possible, such as the date you started (or began administrating) the forum, the date you think it was stolen from you, and what the forum description was about.


  2. Contact Forum Members: Send them an email asking them to report the illegal take over as well (with the same amount of detail mentioned above).

    DO NOT scrap all of your friends regarding this (as that would alert the thief) and do not ask your Orkut friends to report this on your behalf, unless they are members of the forum (as Google is more likely to believe a member than an outsider).


  3. Be patient: Google employees (to my knowledge) do not spend all of their time reading trouble tickets. Most engineers (if not all) spend a large portion of their time making their pet projects better, of which the same holds true for Orkut.

    The good news is that if you are able to contact a Google employee fairly quickly, they will have the ability to help you out with your problem and understand your dilemma. The bad news is that due to the number of trouble tickets that they receive, you will probably not get a response back unless they need more info.

  4. Secure Thy Internet: After getting back your forum (although I would recommend doing this while waiting) you should change your password on your Google account, not to mention delete any cookies, temporary internet files and cache.

    Also I would recommend finding a secure browser such as Opera, Firefox or Internet Explorer with security extentions.


According to Orkut Guide, (a Googler on the Orkut Help google group) Google is in the process of setting up a special forum for stolen communities.

Until then, I would recommend the methods above, as they will help "speed up" the process towards you reclaiming your forums.

Note: If anyone else has any other suggestions, feel free to post them below.

Tuesday, June 12, 2007

Has Google's Orkut Security Been Hacked?


Just when I was about to write a "How to get your forum back if its hacked," post, my inbox and scrapbook have been receiving attention over what seems to be the massive deletion of many forums on Orkut.

This has led many people to suspect that Orkut security has been compromised by a hacker, who seems to have stolen Google Admin powers and is deleting forums (and profiles) at random.

While there are users who have been able to steal forums away from members via hacking, I am having serious doubts as to whether or not Orkut as a whole has been compromised.

Many of the forums that are disappearing seem to be what some consider to be "hate sites." Although in America hate sites are pretty much ignored (and laughed at) by society, some nations seem to have laws against them existing, and go at great lengths to silence them.

Although it is possible that a hacker could have accessed Google's admin controls via internet cookies, a more reasonable explanation seems to be that Google may have given India police "too much authority" and it is quite possible that an officer is abusing their authority online.

(Boing Boing) The Indian Express and other regional media are reporting that Google's social networking service Orkut will cooperate with the Mumbai Police to share IP addresses of users who post "objectionable content" on Orkut. If reports are to be believed, the police need only email a complaint to Orkut, and Orkut will send back the personally identifying data, no questions asked.

The police are said to be targeting a number of "problematic" Orkut posts, including items that criticize various public figures in India, others that glorify Indian mobsters, and "anti-Indian words." The latter probably has to do with a group on Orkut called "I Hate India," which pissed off Indian officials so much, they decided to sue Google over it last October.


This seems very similar to Google's agreement with Brazil, and I suspect that Indian users are facing something similar. Of course, this doesn't mean that a hacker could not have stolen "admin powers" from a Googler (or even an Indian police officer which would be just as bad IMHO) although I think I still need to see more evidence before assuming Google's security on Orkut has been compromised.

Note: If you do have any evidence, please alert Google about this immediately, or if you are uncomfortable with contacting Google (for whatever reason) you can send me a testimonial (which won't be published) and I'll pass on word to Google anonymously.

Tuesday, April 03, 2007

Attack Of The Orkut Clones (And How To Remove Them)



(Image Credit: Collectoybles)


Story: So you are surfing Orkut one day and your friend contacts you and asks why you are scraping disgusting remarks about their girlfriend. You laugh at the your friends accusation, saying you would never do that until he points you to a profile that has your image on it.

Worse, it has your contact info, as well as a list of all your friends. It's a fake profile. So now, what do you do?

______________


Many people have been scraping, commenting (on older posts) or emailing questions on how to remove a fake profile. Although some may consider this trivial, it has resulted in some embarrassing situations for certain people, and believe it or not I've heard of worse examples bordering on criminal.

So for those of you who are harassed by these fake profiles, here are some recommended steps that you can take to successfully remove these profiles from Orkut, as well as suggestions of what NOT to do when you discover one.


  1. Flag the profile: This is the first step that you need to do (and if you skip this, you may end up making the process longer). Underneath every profile (and community) there is a report abuse button where you can notify Google of the offense.



    Select the impersonating someone else or is a fake person option...



    ...and in the text field below provide a detailed description of why this profile is fake, along with links to your real profile and the fake one for Google to compare.


  2. Alert your friends: Contact your friends online (via email not scrapbook) and ask them to do the same above.

    The email method would be advisable over scrapbook because it doesn't alert Mr. Fake Profile on what is happening and it keeps your friends scrapbook from being flooded with unnecessary outrage.

    Note: For those of you who are Firefox fans, Orkut Helper makes this process so much easier as all you have to do is right click and select "report as bogus" on the profile link.




  3. Alert the Orkut Public: believe it or not, there are certain forums whose sole purpose is to alert each other about fake profiles so they can (as a group) remove them from Google's system. See this post for details.


  4. Contact the Authorities: Only do this if the fake profile created is posting your personal info online (i.e. phone numbers, email, address) and random people are requesting disgusting services (you know what I mean by this).

    American users will probably receive a faster response (being that Orkut is hosted here locally) than those in other nations such as Brazil or India. Either way, don't go off into "Google hating," as they often have to balance user privacy against justice issues.

    Note: If you are a lady, I would recommend contacting the authorities if the profile is harassing you in any way, as these losers should know better.


  5. Relax and wait: Don't let this one profile ruin your experience online. After you (and various individuals) have reported this, simply go on surfing Orkut, and enjoying life in Google's deep blue forum.

    Also give Google at least two weeks to remove the profile, as they are supporting close to 50 million users on Orkut alone, let alone the hundreds of millions (if not billions) who use their other services daily.

    Note: if after two weeks you do not receive a response, you can contact Orkut directly over here or alert Google at security [at] google [dot] com .


Now that you know the steps you have to take to successfully remove a profile, here are several things you SHOULD NOT do:

  • Hack the account: This will not only get you banned from Orkut, but also from most of Google's services.

    Worse, your fake profile would still remain, spreading even more havoc online.


  • Threaten the user: Although it may feel great to vent how you feel towards Mr. Fake profile, this could also not only get you banned, but also arrested as well (which would make the situation worse).

    Note: Ironically in similar situations I've seen some people get banned from Orkut because of this (which helps out your enemy more than it helps out you).


  • Spam their scrapbook: It's not only a waste of time, but also a quick way to earn Google's wrath.

  • Yell at Google: I would only recommend this if you want to slow down the response time for Google to solve your problem.

    Simply alert Google to your problem, and do not spell in all caps (it's considered yelling) and check your grammar and spelling.



That's it thus far, and hopefully these steps will help aid your fight against these impostors. I am interested to hear on other ways people have combated these Orkut clones, and if you have any advice or stories to share, then let the rest of us know by posting below.