[google-appengine] How to block Google App Engine?

2011-03-29 Thread Álvaro Degives-Más
What is the best method to block Google App Engine access to a particular domain? I'm seeing fingerprints of attempted abuse, and am decidedly not inclined to chase and flag them one by one, moreover, I categorically don't trust Google App Engine in any non-Google hands. So I'm looking for a sim

Re: [google-appengine] How to block Google App Engine?

2011-03-30 Thread Nick Johnson (Google)
Hi Álvaro, As Barry says, you can do this by checking the user-agent; while App Engine apps may add to the user-agent header, they cannot remove their own App ID from it. Can you elaborate on why you want to do this, though? We take apps that violate our TOS seriously, and if you're speaking abou

Re: [google-appengine] How to block Google App Engine?

2011-03-31 Thread Álvaro Degives-Más
Hi Nick - and by extension, Barry as well (unfortunately I appear to have sent my reply directly to him - my apologies as I didn't CC myself so I can't share what exactly I wrote!) First of all, rest assured that my concerns are not necessarily with Google App Engine, but rather the species of

Re: [google-appengine] How to block Google App Engine?

2011-03-31 Thread Jeff Schnitzer
Can someone translate this into english? Jeff On Thu, Mar 31, 2011 at 5:48 PM, Álvaro Degives-Más wrote: > Hi Nick - and by extension, Barry as well (unfortunately I appear to have > sent my reply directly to him - my apologies as I didn't CC myself so I > can't share what exactly I wrote!) > >

Re: [google-appengine] How to block Google App Engine?

2011-03-31 Thread Álvaro Degives-Más
Friendly reminder: "English" is capitalized. :-) -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to google-appengine@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubsc

Re: [google-appengine] How to block Google App Engine?

2011-03-31 Thread Robert Kluin
Wow. That is a substantial block of text. Are you trying to say you are mad because some App Engine app is proxying your site? On Thu, Mar 31, 2011 at 20:48, Álvaro Degives-Más wrote: > Hi Nick - and by extension, Barry as well (unfortunately I appear to have > sent my reply directly to h

Re: [google-appengine] How to block Google App Engine?

2011-04-01 Thread Calvin
Good gravy! Your point is so veiled in flowery metaphor that I still haven't understood what the core issue is. I thought Robert had it for a second there, but no. Now my theories are that you're either a turing-test bot, or a Batman villain. Is Google sponsoring an exhibit at the Gotham Muse

Re: [google-appengine] How to block Google App Engine?

2011-04-01 Thread Álvaro Degives-Más
No Robert: the point is to preclude Google from perpetrating evil, even when its committed against its own intent. Incidentally, anger is a wasted emotion in security issues. It's almost as bad as overlooking basic security while commenting on the length of messages. Kudos to Brandon for pointi

Re: [google-appengine] How to block Google App Engine?

2011-04-01 Thread Ross M Karchner
I think the phrase "search engine related API development frameworks" might be the key to the misunderstanding here-- App Engine and Google Search are simply products of the same company. It's like calling Microsoft Windows a "search related operating system" simply because Microsoft also makes Bin

Re: [google-appengine] How to block Google App Engine?

2011-04-03 Thread Nick Johnson (Google)
Hi Álvaro, Please correct me if I'm wrong, but it's my understanding that you operate a service that provides an API, and that you're seeing abuse of that API from an app that runs on App Engine. First of all, I'd like to reiterate that App Engine has clear policies on acceptable use. If the app

Re: [google-appengine] How to block Google App Engine?

2011-04-06 Thread Álvaro Degives-Más
Hi Nick, that's excellent advice, and a good analysis from the quantitative end of things. The problem is that abuse does not manifest itself in a statistically more or less uniform manner, so as to allow applying risk factoring as you suggest it. It's an issue that goes far beyond Google App E

Re: [google-appengine] How to block Google App Engine?

2011-04-06 Thread Álvaro Degives-Más
Ross, thanks for your clarification on my crude classification but the key aspect for me is that Google App Engine operates from within Google's *address space*. So, what a Google App Engine powered service *does* as intended, i.e. its *functional* typology is much less important (or defining) t

RE: [google-appengine] How to block Google App Engine?

2011-04-06 Thread Brandon Wirtz
] On Behalf Of Álvaro Degives-Más Sent: Wednesday, April 06, 2011 1:03 AM To: google-appengine@googlegroups.com Subject: Re: [google-appengine] How to block Google App Engine? Hi Nick, that's excellent advice, and a good analysis from the quantitative end of things. The problem is that abuse

Re: [google-appengine] How to block Google App Engine?

2013-04-08 Thread Lucia Liljegren
Hi Álvaro Degives-Más I also use ZBblock and everything from the google app engine except pubsubhubbub and s~feedly-social. I'd actually like to know whether there is some way to look up a description of an apps function so that I can review apps as they come a long and decide which to inclu

Re: [google-appengine] How to block Google App Engine?

2013-01-03 Thread Ismael Desjarlais
Hello Nick, A proxy site has scrapped my site and replaced my site in Google searches. Here is the link fastproxyserv.appspot.com/www.psd2htmlpros.com As a result, my rankings have dropped 900 spots. What can I do about this? -- You received this message because you are subscribed to the Goog

Re: RE: [google-appengine] How to block Google App Engine?

2011-04-06 Thread Álvaro Degives-Más
In my case, I have both; the API isn't one particularly apt for user authentication (i.e. I'm not looking at limiting users to a somehow pre-accredited group) but more for *validation*, in a more or less trivial sense. The thing is, as I'm essentially seeing that "trivial" doesn't exist, the AP