I wonder if Norton was giving a false positive. I built a couple of websites on Google Sites and have found that an external URL is often wrapped in a Google redirect that gives a warning that you are leaving a secure site, I.e., going from https to http. Tom > On Sep 30, 2014, at 8:56 PM, Tom Momeyer via <tmg-refugees@rootsweb.com> wrote: > > Barbara, > > I wasn’t aware that my email to the admin at the google groups site and your > response were going to the TMG Refugees Rootsweb list, but that’s OK. > Thanks for reviewing and responding. > > As reported in my initial/previous email below, I (had) clicked on weblinks > on the RootsMagic support documentation page resulting in virus attacks on > my local PC as reported by Norton Antivirus. I copied the links to Notepad > and they showed as suspicious links and when I clicked on approx. 3 – 5 > weblinks on the page, they did not go to where they were supposed to go and > Norton Antivirus reported an immediate virus attack that it blocked. > > After you sent the message below, I went back to the site and under Recent > Site Activity it shows, “7 minutes ago, Tom Dunaway edited RootsMagic” and > now the links go to the correct locations. > > So, it appears that the previous weblinks on the TMG Refugees Google Groups > site were “hacked” or “virus” links. Under these circumstances, how can > “we” advise others to go to the google group site? Considering that someone > can and may have altered weblinks on the site, have you considered any > action to address that? > > Thanks, Tom M. > > From: Barbara Zanzig [mailto:bzanzig@gmail.com] > Sent: Tuesday, September 30, 2014 8:24 PM > To: Tom Momeyer; Refugees > Subject: Re: TMG Refugees google group > > I'm not seeing the same behavior with suspicious links, Tom. What I may have > seen is a malformed shortened URL? > > Yes, we've thought about the implications of write access. It's a mixed bag, > letting everyone write on the web page. Either one or a small group has to > maintain it--and then you rely on us having time to do it--or we let > everyone write on it, or we somehow manage what pages over 100 members have > write access to (which makes my head hurt, just thinking about it.) > > I don't think anyone is adding bad stuff intentionally and overall I'm very > happy with how people have managed the site. Mistakes may happen, but we'll > take care of them. > > I verify that people are subscribed to the mailing list before I add them to > the website. In addition, I see the log of every change--and you can > subscribe to that stream too if you wish to. > > If anyone DOES find a bad link, please remove it yourself or bring it to > mine or Barbara L's attention so we can take care of it. > > I'm thinking that we'll convert the website to mostly read-only after it > settles down a little bit, but until I see evidence of evil intent I'm > willing to have the risk of having the website open, for everyone's > convenience during this particularly active stage. We are monitoring and > have plans in place to close it down quickly if it comes under attack. > > Barbara > > On Tue, Sep 30, 2014 at 5:01 PM, Tom Momeyer <tom@momeyer.com> wrote: > Hi, > > Appreciate the work going into the TMG Refugees Rootsweb list and the Google > Groups site. As I explored the google groups site, I found that clicking on > a few of the weblinks leads to an internet virus attack that my Norton > Antivirus software stops and reports. Examples for locations include some > of the RootsMagic links on this page: > https://sites.google.com/site/tmgrefugees/software/support-documentation/roo > tsmagic. > > I copied some of the “links” noted above to notepad and see that the links > do not look like real and they do look suspicious. > > So, I also noticed that all members are given “write” privileges, so perhaps > this is how the bogus links crept in and must be one or more members with > “ill” intent? > > Has this been discussed or considered by the google group founder or > founders? Is it possible to have a google group allowing all member “write” > access without associated virus risks? > > Reason I’m asking, is that this weekend, I’m attending a local TMG & SS user > group meeting, where I have facilitated in the past and assisted others with > TMG and SS issues, setup, customization, etc. I’m sure that TMG demise will > come up, and I can offer some info on my explorations into RootsMagic, TMG > Refugees, etc, but don’t want to provide links to the google group that may > have virus links built in. > > Thanks, Tom > > — > Barbara Zanzig > TMG-REFUGEES list admin > admin email: TMG-REFUGEES-admin@rootsweb.com > list > address: http://lists.rootsweb.ancestry.com/index/other/Miscellaneous/TMG-RE > FUGEES.html > list website: https://sites.google.com/site/tmgrefugees > > > *** > To unsubscribe from the list, please send an email to TMG-REFUGEES-request@rootsweb.com with the word 'unsubscribe' without the quotes in the message subject and body. > ------------------------------- > To unsubscribe from the list, please send an email to TMG-REFUGEES-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message