Amazon says listing problem was an error, not a hack

By Robert McMillan, IDG News Service |  Security, Amazon.com Add a new comment

Web retailer Amazon.com blamed a glitch that knocked gay-and-lesbian-themed books out of its main product search engine on a "ham-fisted cataloging error," and disputed one man's claim that he had hacked the site to make this happen.

The problem was first reported on Sunday by author Mark Probst, who noticed that his own book, "The Filly," and other gay-themed books had had their search rankings dropped.

His report set off a firestorm in the blogosphere, where some accused the company of anti-gay censorship.

On Monday, Amazon said that the glitch didn't have to do with only gay and lesbian titles. It affected 57,310 books worldwide "in a number of broad categories such as Health, Mind & Body, Reproductive & Sexual Medicine, and Erotica."

The company is still in the process of fixing the problem, Amazon spokeswoman Patricia Smith said via e-mail on Monday.

That didn't prevent one man from claiming credit for the glitch. As bloggers complained that Amazon's explanation didn't adequately explain what had happened, a hacker going by the name of Weev said that he had caused the problem by exploiting a common Web programming error on the Amazon site.

Bloggers quickly debunked Weev's claims, saying that it did not appear as though his attack would actually work.

Weev's claims are false, Amazon's Smith said.

Former Amazon employee Mike Daisey said that the problem really did appear to have been caused by an employee mistake.

A friend within the company told him that someone working on Amazon's French site mistagged a number of keyword categories, including the "Gay and Lesbian" category, as pornographic, using what's known internally as the Browse Nodes tool. Soon the mistake affected Amazon sites worldwide, Daisey said in an interview. "If you use that tool in one site, it affects every site in Amazon. So the guy screwed up in France and it propagated everywhere," he said.

Daisey, a monologist who spent three years at Amazon, was amused that Weev's claims had been so widely reported, given that Weev has made a name for himself as an online "troll" who lies for fun. "I think it's hilarious that he's gotten as much traction as he has with the story because his whole modus operandi is about pranking people."

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question