Yahoo Delete URL Feature Disaster Waiting to Happen

Tuesday, January 30th, 2007;
-- Jeremy Luebke |

Yahoo announced a number of very nice new features for Site Explorer today. The Yahoo Search Blog has a full list.

The feature I am most interested in and also worried about is the new “delete URL” feature. It is literally a disaster waiting to happen. There is zero verification other than being logged into the proper Yahoo account to delete an entire site from the Yahoo index.

With Google you are required to upload a robots.txt file to the webserver that verifies the same information being requested through the Google delete URL/Site tool. With Yahoo, you just log in, click delete, click confirm, and it’s gone.

Until they fix this issue I recommend to everyone that you don’t authenticate any domain to Yahoo Site Explorer and if you have previously authenticated a site that you remove the authentication file or meta tag. If this loop hole is not fixed it’s only a matter of time before webmasters start waking up to entire sites missing from the Yahoo index. Yahoo accounts are too accessible to phishing and hack attempts to be the only barrier for such a powerful tool.

** Are you the next big name in search marketing? Enter our SEM Scholarship Contest & you could win $10,000 in prizes!

5 Responses to “Yahoo Delete URL Feature Disaster Waiting to Happen”

  1. Urls über den Yahoo Site Explorer aus dem Yahoo-Index löschen - ein Sicherheitsrisiko? Says:

    […] Dazu Jeremy Luebke: It is literally a disaster waiting to happen. There is zero verification other than being logged into the proper Yahoo account to delete an entire site from the Yahoo index. […] If this loop hole is not fixed it’s only a matter of time before webmasters start waking up to entire sites missing from the Yahoo index. Yahoo accounts are too accessible to phishing and hack attempts to be the only barrier for such a powerful tool. […]

  2. Priyank Garg Says:

    We regularly recheck that a site has the user’s authentication file present every few days. If ever we realize that the authentication file is removed we reverse all actions that were taken by that account. Hence, if your userid is ever compromised, immediately remove your authentication key from your site to undo any unwanted actions on Site Explorer. This is also documented in the Site Explorer Help http://help.yahoo.com/help/us/ysearch/siteexplorer/siteexplorer-49.htm l (refer note at the bottom).

  3. Tha Tech Net Podcast » Blog Archive » Yahoo Delete URL Feature Disaster Waiting to Happen Says:

    […] how anyone can delete a website from the yahoo search engineread more | digg story […]

  4. SEOPittfall » Blog Archive » Be Careful Where You Click Says:

    […] Here are what others are saying: Marketing Pilgrim: “The feature I am most interested in and also worried about is the new “delete URL” feature. It is literally a disaster waiting to happen. There is zero verification other than being logged into the proper Yahoo account to delete an entire site from the Yahoo index.” […]

  5. BuzzBlog » Blog Archive » Linkdump: linkbaiting, copywriting, Yahoo, Adwords e.v.a. Says:

    […] Search Engine Land praat over de nieuwe ‘delete url‘ mogelijkheid in Yahoo. Danny Sullivan legt uitgebreid uit hoe het werkt, bijvoorbeeld door het te vergelijken met index exclusion regels in robots.txt en in meta-robots. Als je de ‘delete url’ feature van Yahoo site explorer gebruikt, wordt je pagina nog steeds gecrawld, maar het wordt niet opgenomen in de index. Deze optie is met name handig als je SNEL iets wil verwijderen uit de index van Yahoo. Er wordt stilgestaan bij de mogelijke veiligheidsrisico’s naar aanleiding van een post op Marketingpilgrim. […]

Leave a Reply

Please read our comment policy.