Thursday, June 16, 2011

Reality Revealed How Internet Marketing Companies FAKE Their Clients

Reality Revealed by Jaswinder Kaur: 
How Internet Marketing Companies FAKE Their Clients
By Jaswinder Kaur

Popularity of the internet has been rising gradually with the passage of time and every person is looking for search engine for their queries. As Google is the leading the entire search engines market, everyone wants to stay at top in the Google rankings. With the growing reputation of the Google, demand of search engine marketing is also growing. People are following and hiring expert to do the Search engine marketing for their businesses, so that they can promote their business more effectively on Google.

Harmful Tactics of Search Engine Marketing

Ecommerce companies are using various sloppy tactics to fulfill the requirements of their clients. Due to lack of knowledge and impatience nature of clients, most of the SEM firms are using unethical ways to promote the business of their clients online. Inexperience is the major cause of increased spamming and unlawful marketing practices.
Some of the illicit techniques used generally are as follows.

Link Exchange: Link exchange is the most crucial part of any online marketing campaign. It improves the reputation of our website marketing campaign by getting quality and relevant inbound links. Some of Ecommerce firms are misusing this technique by placing the website link on some irrelevant websites, which are designed especially for link building purpose. These websites are called link farms as they place hundreds of links on a single page which are not even cached and indexed. Most of these links are no follow, broken and irrelevant. At the same time to do bulk link exchange companies put the link on different websites of same IP address just to show the client that there link has been placed on different websites. Theses links are useless because they are counted as a single link by the search engines.
Copied Content: Content is the backbone of a website. It is very important to put original and well optimized content on your website which can be useful for the reader. Companies fool their clients and search engines by using copied content, irrelevant or spun content which is not at all informative for a reader. It harms our website as search engines blacklist our website and don’t allow our website to move up in search engines despite our efforts to shoot it’s position up in search engines.
Keyword Stuffing: Keywords are the most crucial part of a website. Choosing write keywords can boost the position of your website instantly. Basically it’s a balanced combination of keywords and content which is necessary for the success of a website. We have to maintain the density of keywords in the content according to search engine standards. But excessive use of highly competitive keywords in the content makes it illegal way to promote the website in a short span of time. So by boosting the ranking of keywords in the search engine company make their client happy but after some time when search engine catches these culprits they through them down.

Designing Tricks: Designing is the first impression of your website on the visitors. At the same time designing can be misused to play different tricks to increase the visibility and popularity of the website. Some of the most common tricks played by the designers are use of hidden text, cloaking, hidden links, doorway pages and improper redirects.

Misuse of Web 2.0 and Social Networking: Web2.0 websites are meant for the purpose of sharing knowledge. But today quality of these websites is declining because people are adding irrelevant and copied content to fulfill their purpose. This causes spamming and also degrades the rating of the website. Similarly social networks are designed for the purpose of sharing and promoting the information. These are some of most popular ways to increase the traffic on the website. People are making fake profiles to promote their business profiles on the social networking websites.

Search engine marketing was introduced to help people market their business and share their information. But now some webmasters are misusing this concept to get instant success. You can’t fool search engines with for a long time with these techniques, so it’s better to focus on building your knowledge and using ethical ways to promote the business online instead of using glittering short term un ethical tricks.

Simple URL Manipulation was used to hack Citibank
The theft of approximately 200,000 Citibankcustomer accounts may have achieved by means of a simple manipulation of the Citibank URL. Security experts told the The New York Times that the hackers were able to impersonate actual account holders by using a simple trick.
After logging into a valid account, the URL to the Citi Account Online system contains a string of numbers which represents the customer's account. By changing this string, the criminals were able to easily switch between multiple accounts and obtain private customer information. Using a script to automate this process allowed them to do so hundreds of thousands of times.
The attackers are said to have gained access to around one per cent of the bank's approximately 21 million credit card customers in North America. Details obtained in the attack included customer names, account numbers and email addresses. The hackers did not, however, gain access to the security codes for the credit cards or to the holders' Social Security numbers and birth dates.
Citibank says that it first discovered the break-in at the beginning of May during a routine check. The company has since reported it to criminal investigators and says it has stepped up its security. Citibank has not yet announced who it believes is responsible for the attack, but the security expert who talked to The New York Times on condition of anonymity, says that he presumes they are from Eastern Europe
PayPal vulnerability: Paypal accounts are safe. [Updated]

This has been debunked, Paypal accounts are safe. We’ve spoken in depth to Matt Langley, the person who discovered the supposed issue, and it’s clear why he assumed there was a serious security breach but the issue is far less serious than initially thought.

Matt Langley explains:
''It seems that the ‘victim’ had opened an account using an email address of mine, with extra characters thrown in, which Gmail ignores and accepts as the same email address, so it was gmail which uncorrupted the email address and sent the emails to me, not Paypal. I had previously reported an account set-up with fraudulent email address to Paypal many times in the past, but only yesterday noticed that the email address was different to mine, in a way which on any other email system in the world would be a different email address.”
There is a small vulnerability because Gmail allows you to include dots in your email address, it essentially allows anyone to create multiple Paypal accounts with the same email address because Paypal recognises the inclusion of a dot as a separate email address entirely. It’s seems like a flaw but not a massive security vulnerability. Also Paypal also doesn’t appear to verify email addresses on registration so anyone can create multiple accounts for the same person without any need to click a confirmation link in a verification email. Again, a flaw but not a massive security vulnerability.

A security vulnerability in PayPal’s systems may make it possible to gain full, unrestricted access to any account within 30 seconds, we’ve heard from Matt Langley of Integrated Computer Enterprises Limited.

The vulnerability lies in PayPal’s forgotten password recovery features. Says Langley:
PayPal sends Password Forgotten Change tokens to unauthorized email addresses instead of the email address on the account. Once you follow the link they email, and change the password, you are given total access to that account. No trickery or sophisticated hacking is required. It’s a bug in their email system that corrupts email addresses.
Once the attacker has access, there’s nothing restricting their ability to siphon money out of the account.

The exploit is, of course, a direct violation of PayPal’s privacy policy and a laundry list of laws, so don’t try this at home — but PayPal needs to act as thieves aren’t particularly concerned with such things.

After a range of high profile attacks this year, use of this vulnerability would easily topple the Sony PlayStation Network attack as the most significant and damaging of the year. PayPal is used by millions of Internet users to transfer money.

Our source says that PayPal has been warned previously but ignored his emails. We’ve contacted PayPal on this matter and are awaiting a response.

No comments:

Post a Comment