Feeds

Google Oompa Loompas cloaking user agents?

Goobuntu rumor resurfaces

Protecting against web application threats using SSL

Over 10 per cent of Google's internal machines are hiding their software makeup from the outside world, according to data collected by Net Applications, a web analytics outfit that captures user traffic on more than 40,000 sites across the net.

When visiting webpages, the firm says, 11 to 13 per cent of internal Google machines display browser user agents that are completely empty. And judging from the behavior of these machines, Net Applications is confident they're operated by real people. "We are quite certain it’s not the Google search spider," Net Applications' Vince Vizzaccaro tells The Reg.

Net Applications would not provide additional information, and when we contacted Google, the company declined to comment - multiple times.

Late last week, Net Applications told InternetNews - and The Reg - that these Google machines were leaving user agents where only the operating system was stripped out. Vizzacarro has now told The Reg that this characterization was not true, that the user agents in question are stripped of everything. But his initial claim led InternetNews to speculate that Google was testing some sort of new-fangled operating system behind its firewall - and the rumor was off and running.

A browser user agent not only identifies the browser a machine is using, but also its operating system.

It's well known that Google uses its own version of Ubuntu Linux - dubbed Goobuntu. And at one point, according to a former employee, engineers also used a customized version of RedHat known as GRHat. But this employee - who did not work with the core engineering team - was unaware of Google using a proxy server or any other means of blanking out user agents.

In the past, Google and Ubuntu boss Mark Shuttleworth have denied that Mountain View has any interest in distributing Goobuntu outside the company.

But as Google beefs up its online office apps and builds out massive data centers across the planet, the world has long assumed that the search giant would one day build its own "cloud OS" - an operating system that depends heavily on web-based services.

And that may be the case. But blank user agents are no proof of it. If Google were attempting to hide an internal operating system, it could just as easily change the OS identifier in its user agents to something run-of-the-mill rather than blank the agents out entirely.

Johann Burkard, a programmer and webmaster who closely tracks browser user agents, says that empty agents account for less than one per cent of the traffic he sees. But he tells us he has not seen the Google traffic Net Applications speaks of, and he doesn't see why Google would do such a thing.

Burkard blocks traffic with empty user agent headers and many other webmasters do the same. And he agrees that if Google were testing a top secret OS, disguising it as Windows or an ordinary Linux would make the most sense.

So why is Net Applications seeing what it's seeing? ®

The next step in data security

More from The Register

next story
New 'Cosmos' browser surfs the net by TXT alone
No data plan? No WiFi? No worries ... except sluggish download speed
'Windows 9' LEAK: Microsoft's playing catchup with Linux
Multiple desktops and live tiles in restored Start button star in new vids
iOS 8 release: WebGL now runs everywhere. Hurrah for 3D graphics!
HTML 5's pretty neat ... when your browser supports it
Mathematica hits the Web
Wolfram embraces the cloud, promies private cloud cut of its number-cruncher
Google extends app refund window to two hours
You now have 120 minutes to finish that game instead of 15
Intel: Hey, enterprises, drop everything and DO HADOOP
Big Data analytics projected to run on more servers than any other app
Mozilla shutters Labs, tells nobody it's been dead for five months
Staffer's blog reveals all as projects languish on GitHub
SUSE Linux owner Attachmate gobbled by Micro Focus for $2.3bn
Merger will lead to mainframe and COBOL powerhouse
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.