Google’s I’m Feeling Lucky Button Enabling Spam
Google’s “I’m Feeling Lucky” functionality is apparently enabling a lot of email spam to bypass filters.
When you use the button by entering a keyword phrase and hitting the “I’m Feeling Lucky” button, Google sends you straight to the very first webpage in their results that matches that phrase.
Spammers have apparently found that they can embed links like this one for Natural Search Blog to the Google I’m Feeling Lucky functionality, and their emails will bypass filters that would automatically catch lots of blacklisted and spammy-looking URLs. Email filters allow links to search engine results through because many people may genuinely send such links to one another.
It was just the day before yesterday that I wrote about how a guy was using the I’m Feeling Lucky button to enable some cool linkbait involving Chuck Norris. That was a benign use of the application, whereas using it to obscure links to evil spammy sites would definitely be unethical/black-hat.
So, how will this get fixed? I’d expect that Google may have to lock down their “I’m feeling lucky” functionality so that it only works for users referred directly from the Google homepage, and from the Google Toolbar (if the user has enabled the I’m Feeling Lucky button on the toolbar).
Possible Related Posts
Posted by Chris of Silvery on 01/30/2008
Permalink | | Print | Trackback | Comments Off on Google’s I’m Feeling Lucky Button Enabling Spam | Comments RSS
Filed under: Google, Security Google, I'm feeling lucky, Security, spam