<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Google Search Results: &#8220;This site may harm your computer&#8221;</title>
	<atom:link href="http://www.brattleconsultinggroup.com/blog/uncategorized/google-search-results-this-site-may-harm-your-computer/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.brattleconsultinggroup.com/blog/uncategorized/google-search-results-this-site-may-harm-your-computer/</link>
	<description></description>
	<lastBuildDate>Thu, 23 Sep 2010 12:02:21 -0500</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: world cup 2010 betting odds</title>
		<link>http://www.brattleconsultinggroup.com/blog/uncategorized/google-search-results-this-site-may-harm-your-computer/comment-page-1/#comment-29820</link>
		<dc:creator>world cup 2010 betting odds</dc:creator>
		<pubDate>Mon, 14 Jun 2010 16:49:30 +0000</pubDate>
		<guid isPermaLink="false">http://www.brattleconsultinggroup.com/blog/?p=210#comment-29820</guid>
		<description>This is one of the most honest blogs I have ever read. Nothing overcomes good first hand experience on topics. Thank you for being sincere about this.</description>
		<content:encoded><![CDATA[<p>This is one of the most honest blogs I have ever read. Nothing overcomes good first hand experience on topics. Thank you for being sincere about this.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Thedutchguy</title>
		<link>http://www.brattleconsultinggroup.com/blog/uncategorized/google-search-results-this-site-may-harm-your-computer/comment-page-1/#comment-28502</link>
		<dc:creator>Thedutchguy</dc:creator>
		<pubDate>Mon, 10 May 2010 20:44:57 +0000</pubDate>
		<guid isPermaLink="false">http://www.brattleconsultinggroup.com/blog/?p=210#comment-28502</guid>
		<description>Great article, will definitly check out this website for more! Keep it up. regards.</description>
		<content:encoded><![CDATA[<p>Great article, will definitly check out this website for more! Keep it up. regards.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Compras Panama</title>
		<link>http://www.brattleconsultinggroup.com/blog/uncategorized/google-search-results-this-site-may-harm-your-computer/comment-page-1/#comment-27990</link>
		<dc:creator>Compras Panama</dc:creator>
		<pubDate>Fri, 23 Apr 2010 04:33:07 +0000</pubDate>
		<guid isPermaLink="false">http://www.brattleconsultinggroup.com/blog/?p=210#comment-27990</guid>
		<description>Superb, thanks for posting!</description>
		<content:encoded><![CDATA[<p>Superb, thanks for posting!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Geri D. Mahoney</title>
		<link>http://www.brattleconsultinggroup.com/blog/uncategorized/google-search-results-this-site-may-harm-your-computer/comment-page-1/#comment-25303</link>
		<dc:creator>Geri D. Mahoney</dc:creator>
		<pubDate>Tue, 12 Jan 2010 11:41:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.brattleconsultinggroup.com/blog/?p=210#comment-25303</guid>
		<description>Highly informative write up. I am off to share this with my friends.</description>
		<content:encoded><![CDATA[<p>Highly informative write up. I am off to share this with my friends.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Search file</title>
		<link>http://www.brattleconsultinggroup.com/blog/uncategorized/google-search-results-this-site-may-harm-your-computer/comment-page-1/#comment-24673</link>
		<dc:creator>Search file</dc:creator>
		<pubDate>Fri, 18 Dec 2009 20:02:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.brattleconsultinggroup.com/blog/?p=210#comment-24673</guid>
		<description>great info liked it...</description>
		<content:encoded><![CDATA[<p>great info liked it&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Thomas J. Raef</title>
		<link>http://www.brattleconsultinggroup.com/blog/uncategorized/google-search-results-this-site-may-harm-your-computer/comment-page-1/#comment-22372</link>
		<dc:creator>Thomas J. Raef</dc:creator>
		<pubDate>Mon, 22 Jun 2009 15:03:05 +0000</pubDate>
		<guid isPermaLink="false">http://www.brattleconsultinggroup.com/blog/?p=210#comment-22372</guid>
		<description>We have seen many of these iframe infections lately. It seems to the be the website infection dujour.

It could be a keylogger or it could also be a virus we&#039;ve seen a lot of that sniffs the FTP traffic from the PC to the website. As you know, FTP transmits in plain text. So all data, including the username and password are easy to sniff in the traffic stream. This information is then sent to a server that takes that information, logs in to the site, modifies the code, then monitors it for any changes. If the malicious server detects any changes or missing malscripts, it tries to re-infect the website. 

We&#039;ve seen many reports of website owners complaining that part of their morning breakfast ritual is to re-upload their site. After changing the FTP password and scanning their PC and cleaning it, we recommend that all website owners move away from FTP and go to either SFTP or FTPS both of which encrypt their transmissions making it nearly impossible to sniff the FTP credentials.

Just thought you might like to pass that along to your readers as well.

Thank you.</description>
		<content:encoded><![CDATA[<p>We have seen many of these iframe infections lately. It seems to the be the website infection dujour.</p>
<p>It could be a keylogger or it could also be a virus we&#8217;ve seen a lot of that sniffs the FTP traffic from the PC to the website. As you know, FTP transmits in plain text. So all data, including the username and password are easy to sniff in the traffic stream. This information is then sent to a server that takes that information, logs in to the site, modifies the code, then monitors it for any changes. If the malicious server detects any changes or missing malscripts, it tries to re-infect the website. </p>
<p>We&#8217;ve seen many reports of website owners complaining that part of their morning breakfast ritual is to re-upload their site. After changing the FTP password and scanning their PC and cleaning it, we recommend that all website owners move away from FTP and go to either SFTP or FTPS both of which encrypt their transmissions making it nearly impossible to sniff the FTP credentials.</p>
<p>Just thought you might like to pass that along to your readers as well.</p>
<p>Thank you.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

