What is done to confirm phishing and malware reports?
There appears to be an effort to either corrupt or report as corrupt vaccine safety sites. What efforts does Mozilla make to help the sites they report as corrupt: clean up their sites or defend themselves from false reports?
All Replies (2)
The malicious site list comes from https://www.stopbadware.org/, a joint list maintained by Google, Mozilla, and others. If a website is shown as malicious but isn't, then the website owners can request a review.
And no, there is no "conspiracy" to block a certain swath of websites. Websites that are unsafe are blocked, there are occasionally false-positives but it's fairly rare.
A quick examination of the site did not find answers to:
Is there any evidence of a problem that is shared with the reported site's techies before blacklisting? Given the delays involved in discovery and the review process this only seems fair.
Must a data provider provide evidence or do they simply give a list to StopBadware? The report Badware page seem to suggest that the report might or might not be reviewed before going in the list. That they are simply a clearing house.
The Clearinghouse Search didn't seem to work for several sites I've seen listed by FireFox, Google, or Webroot SecureAnywhere (my system's anti malware software). Generally the notices I have seen simply say its been reported by someone, with no specifics. How do prove they are clean without details? On the surface this seems like it has the same issues as the Wiki system.