Search Central Live is coming to New York City on March 20, 2025! Learn more and
apply for an invite.
Site Verification
November 18, 2005
This morning we learned of an issue with the Google Sitemaps tool that may have temporarily
enabled users to view statistics about sites they do not own. We acted quickly and fixed the
issue. To ensure the security of all sites using the Google Sitemaps tool, we will re-verify all
sites added in the last 48 hours.
When we
first started showing statistics
a couple of months ago, we put a system in place to prevent anyone other than site owners from
seeing stats for a site. We ask each site owner to place a unique file on the site and then we
check to see if that file exists. When we do that check, we first make sure that the server isn't
misconfigured to return a valid page when a request is made for a page that doesn't exist. We only
verify sites that are configured correctly. You can read more about that process in our
documentation.
Unfortunately, with our latest release, a bug prevented this process from working correctly. We
fixed this as soon as we found out about the problem. We take your privacy very seriously and are
currently investigating other approaches to further enhance security.
Posted by Vanessa Fox
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
[null,null,[],[[["A bug in Google Sitemaps temporarily allowed users to see statistics of websites they did not own."],["Google has resolved the issue and is re-verifying all sites added in the last 48 hours to ensure security."],["Google's site verification process involves checking for a unique file placed on the site by the owner to confirm ownership."],["A bug in a recent release bypassed this verification process, leading to the security issue."],["Google is investigating additional security measures to prevent similar incidents in the future."]]],["A bug in the Google Sitemaps tool on November 18, 2005, temporarily allowed users to view statistics for sites they didn't own. Google promptly fixed the issue and will re-verify all sites added within the prior 48 hours. The bug affected the site verification process, which normally prevents unauthorized access to statistics by checking for a unique file on the site and confirming correct server configuration. Google is investigating further security enhancements.\n"]]