Profile

Cover photo
Verified name
Pierre Far
Works at Google UK
2,167,859 views
AboutPosts

Stream

Pierre Far

Shared publicly  - 
15
Add a comment...

Pierre Far

Shared publicly  - 
 
Having your site get hacked is a stressful experience. We just published a couple of case studies of sites that cleaned up after a hack. Definitely worth a read.
 
Has your site ever been hacked?  Ever wonder what a hack looks like?

My team just published two case studies on how web sites managed to cleaned up after getting hacked by spammers.  There's some interesting detail here, definitely worth a read.

http://googlewebmastercentral.blogspot.com/2015/02/case-studies-fixing-hacked-sites.html
1 comment on original post
16
5
Alberto Estrada's profile photoMichael Johnston's profile photoRajat Mittal's profile photochiejoung poon's profile photo
Eric Wu
 
Sadly dealt with this a lot last year. You know what happens when your stack is a forked version of WP where the former engineering team hacked the core for their own custom plugins?

You end up with a lot of disgruntled ex-employees who have installed multiple reverse bind shells and constantly attack the sites between 8 AM - 5 PM M-F for 3 months and take breaks at lunch and in the afternoon.

Our solution, after the 3 day of attacks and restoring everything from backup, we lengthened the TTL of the CDN cache. Once we detected the hacks starting, we took the sites down and left the clean static version of the site for the users. Then we identified and patched the exploits and waited for the next attack.

I like to think of it as QA by InfoSec. O.o
Add a comment...

Pierre Far

Shared publicly  - 
 
Over the weekend, I found a URL that is not just mobile-friendly, but actually hostile to desktop users. It simply refuses to show any useful content to desktops, and instead redirects desktop users to a page that tells them about the content they're missing out on :/

That's very wrong. Please don't do it.

We live in a world where content can be consumed on any device. Thinking mobile first is good because that's really important now (has been for a while, will be for a while). Ignoring a class of device is wrong for exactly the reasons ignoring mobile users is wrong.
31
5
Tara Johnston's profile photoPe lagic's profile photoamit roy's profile photoMartin Oxby's profile photo
12 comments
 
A lot of work both in offices and on trains/planes is done on larger screens still. In fact we live in an era of tiny and the extremely large screens (think Phone vs. browsing the web on TVs).

Our main challenge nowadays at +Summit Web Solutions is not the mobile screens but how to effectively server super-sized screens. Responsive and adaptive techniques are needed as we need to effectively serve users regardless of how they access a website. - i.e. meet people where they are not just where we think they ought to be.
Add a comment...

Pierre Far

Shared publicly  - 
11
1
carol beard's profile photoTomoko Nishihara / 西原 智子's profile photo
 
i would like to see
 some trends from there
Add a comment...

Pierre Far

Shared publicly  - 
Gary Illyes is focused "on helping website owners and content creators develop beautiful, useful websites by improving and extending our outreach channels." Read this exclusive interview to learn how he's working to achieve this goal.
16
3
Thomas Goering's profile photoChristian Geng's profile photoMichael Johnston's profile photoTara Johnston's profile photo
2 comments
 
I never would have guessed the two were the same height. 
Add a comment...

Pierre Far

Shared publicly  - 
 
Wanna help us test something? In Webmaster Tools? About search queries? Details below :)
 
The Webmaster Tools team is looking for testers of a new 'search query' feature.

If you regularly use search query information from Webmaster Tools, we're working on something new for you! We're looking for testers of an early update to the search query feature. If you'd like to try it out, and give us feedback along the way, feel free to sign up here.

Here's the form: http://goo.gl/Iub7Zt
44 comments on original post
21
5
Lisa McClure's profile photoFili Wiese's profile photoBrian Ussery's profile photoLinda Galaziou's profile photo
4 comments
 
I've just submitted the form. Looking forward to seeing what you've got to offer! Thanks Pierre.
Add a comment...

Pierre Far

Shared publicly  - 
 
Dear webmasters,

If you launch a new site, a brand new refresh, something awesome, something to be proud of and tell your family and friends about, something that may win you a design award, something in which you've put a lot effort, please also don't forget to remove the noindex directives when you go live.

Just sayin'.
1
Barry Schwartz's profile photo
 
maybe they don't consider GoogleBot to be a friend?
Add a comment...

Pierre Far

Shared publicly  - 
 
A bluegrass cover of Blurred Lines just should not be allowed, and definitely should be allowed to be this awesome!

Also https://www.youtube.com/watch?v=5meWI3iX1sE&list=PL7A4D9C100657150E&index=55

Thank you +ScottBradleeLovesYa!
12
2
Gary McKinnon's profile photoJune M's profile photoSimon Lamble's profile photoRita Turner's profile photo
4 comments
June M
 
tongue in cheek,, where's my cut-offs?  
Add a comment...

Pierre Far

Shared publicly  - 
 
This is very good news! IE gets HSTS with a preload list based on the open source Chromium list.

http://blogs.msdn.com/b/ie/archive/2015/02/16/http-strict-transport-security-comes-to-internet-explorer.aspx

Chrome's list is also shared by Firefox. Details of the requirements and how to get on it at:

https://hstspreload.appspot.com/
As part of our ongoing commitment to help build an interoperable, secure web that “just works,” we're excited to announce support for HTTP Strict Transport Security (HSTS) in Internet Explorer. This change can be previewed using Internet Explorer in the Windows 10 Technical Preview, ...
20
2
David Iwanow's profile photoFili Wiese's profile photo
Add a comment...

Pierre Far

Shared publicly  - 
 
Kinda cool what the web platform allows these days. 

http://paul.kinlan.me/2-factor-auth-service-worker-and-push/
6
Add a comment...

Pierre Far

Shared publicly  - 
 
Security level... 12? :)

And while I have your attention, remember that the insecure SSLv3 seems on its way out from browsers. This is a good chance to upgrade:

https://groups.google.com/a/chromium.org/forum/#!topic/security-dev/Vnhy9aKM_l4
 
Googlebot supports TLS 1.2 !

Googlebot now supports TLS version 1.2, in addition to previous versions: TLS 1.0, TLS 1.1 and SSLv3.

Reminder: old OpenSSL versions are vulnerable; we strongly recommend that you use the latest and newest versions of TLS libraries

For more information about HTTPS websites, see:
Our Help Center article: https://support.google.com/webmasters/answer/6073543
Our I/O presentation: https://www.youtube.com/watch?v=cBhZ6S0PFCY"

#httpseverywhere   #googlewebmaster  
1 comment on original post
10
1
Raul Santos's profile photo
Add a comment...

Pierre Far

Shared publicly  - 
 
Locale-aware crawling by Googlebot

Today we're taking our first small steps to support crawling, indexing, and ranking of locale-adaptive pages. 

What are these? A locale-adaptive page is one that changes its response based on the perceived geographic location or language preference of the visitor. For example, a page may dynamicaly serve different content to users in the USA and Canada on the same URL, or may block access from a some countries, or may respond differently based on the visitors Accept-Language header.

Today Googlebot gets two new capabilities:

1. Geo-distributed crawling, where you may start seeing real (verifiable!) Googlebot user-agents crawling from IP addresses that appear to be coming from outside the USA.

2. Language-dependent crawling, where Googlebot may set different Accept-Language headers in the HTTP request.

A few important points:

1. We still (very strongly) recommend having separate URLs for different locales and using rel-alternate-hreflang annotation for them. Separate URLs are better for users, and that's what really counts. Locale-aware crawling is for the few edge cases where it's not possible for you to have separate URLs.

2. It's early days and the countries that Googlebot will appear to come from and the Accept-Language headers it may try do not cover all combinations of countries and languages around the world. Also, we will continue to tweak things as we build out this feature. This is another reason to have separate URLs.

3. Locale-aware crawling gets enabled algorithmically if we detect your site may benefit from it. You don't need to do anything :)

Dig in more:

1. rel-alternate-hreflang: https://support.google.com/webmasters/answer/189077
2. Blog post: http://googlewebmastercentral.blogspot.com/2015/01/crawling-and-indexing-of-locale.html
3. Help Center about locale-aware crawling: https://support.google.com/webmasters/answer/6144055
60
53
fiorica gasparini's profile photoMatthias Hackemann's profile photoNiels Bijvoet's profile photoKaitlin McMichael's profile photo
37 comments
 
Have to agree that the setup needs correcting. Having the hreflang site map for the main domain also needs a returning hreflang from all the sub hreflang subs.

It may be easier to head over to googles forum on internationalisation where they can get to the bottom of any issues.

https://productforums.google.com/forum/m/#!categories/webmasters/internationalization

Let me know if and when you post there and I'll head over to help.

William 
Add a comment...
Story
Tagline
Helpful sarcasm.
Introduction
I work at Google as a Webmaster Trends Analyst. This is my personal profile.

What do I do at Google? I help webmasters build better websites, so you'll see me talking to webmasters on our and other forums, writing blog posts, saying things like "I'll ask internally" and the like.

Where to find me around the web:
Bragging rights
PhD in bacterial genetics.
Links
YouTube
Contributor to
Work
Occupation
Webmaster Trends Analyst at Google UK
Employment
  • Google UK
    Webmaster Trends Analyst, 2011 - present