Printable View
http://www.newscientist.com/news/news.jsp?id=ns99994002Quote:
Computer hackers have adopted a startling strategy in their attempts to break into websites. By using the popular search engine Google, they do not have to visit a site to plan an attack. Instead, they can get all the information they need from Google's cached versions of web pages, say experts in the US.
Hehe this is no surprise since google is the best search engine to use to find anything on the web. I bet they are working really fast to fix those loopholes
Alas many times the information directly relevant to the search is found in Cache. This is the only way searches can reveal information specific to the search itself. Damn that's alomst a toung twister. Another Ramble by Galdron.
Catch 22 if you ask me. The good outways the evil in this case.
P:
Good info MEM.
Well hole or no hole I like google :)
A tutorial I read on how to use Google to find such 'holes' gave clear note that it is not a flaw within Google itself that these pages/documents can be found, rather a mistake in those configuring the webserver. Even in the link MemorY posted it is mentioned 'faulty software implementation' at some point, in regards to this. If such a link is publicly available, it means someone, somewhere, didn't do his/her job quite as he/she should have.
For those having a webserver or testing ones security, the tutorial I mentioned can be found at
http://neworder.box.sk/newsread.php?newsid=8203
I am aware the Box.sk network is viewed by many as a hacker's resource, but I hope I need not explain again one cannot be good at protecting a site [website or other internet-connected machine] if one is not up2date with what the possibilities are for someone to 'own' you. This tutorial explains the search features Google has to offer and a theoretical approach at getting that info through the engine. Hope it helps you to protect whatever you have to protect, and readers will be mature enough not to use it as anything else but an informational resource.
cheers!
Hi all-
I wish I could find it...I learned about the availability of information from cached pages here in a google tutorial.
I remember the post saying to hurry up and use it before it was no longer available. ;)
Hmmm, no offense, but were hypronix and memorY the only ones to really read that article? It doesn't mean that you should like Google any less, or it's "something you should use while it's still available" or anything like that..
The basic point was that this really isn't a hole in google, but a means that people are using google to find holes in webservers or web apps... and because of google's cache (not to mention many others out there), it enables hackers to find information that's no longer accessible on the site (perhaps being long-since patched, removed, etc) but perhaps still pertinent to the security of the site... hell, it even enables people to easily find things buried within the comments on a page but perhaps not clearly displayed in the browser -- search engines can be a very powerful tool (somewhat evident by the large number of "just use google" posts along with the many tutorials on the very same subject). And, of course, with anything so useful, they're often employed for both good and bad purposes...
So, this really isn't "something for Google to fix" (as there are many legitimate reasons for people to post things that might look very similar to "useful information" (as we used to call it) but not really have it fall under this sort of category). It's just one thing that any decent "hacker" does while enumerating a site, anyway, if you ask me...
Just my $0.02...
stupi h4x0r(s) ,
-because of stuff like this... Google will now be less effective...
Personally, I always like google's hacker page:
I agree that google is the best search engine but, who's responsibility is it to keep the sight secure, If not google?
As hypronix reminded us, the use of Google to exploit some webpages is not so recent than this.
I personally consider it is not a google fault. It's simply a clever use of the cache feature which respect exactly is goal: viewing a page without accessing to the real page. Why hackers would reject a technology that everybody use everyday?
I need not stress this more I think... but since webmasters can use Google aswell as any possibe cracker [let hackers remain hackers...] can. If it sounds like a lot of work, well... those guys are still getting paid, and if the cracker has the time, why doesn't the webmaster has the time too?
I, to be part of the creators/maintainers of Google, would not modify the search engine any bit [by removing options from it].
cheers!
cj7jeeper your kidding...right?
google is not responsible for what you have or dont have on your site any more the than it is responsible for any bad configurations or security holes one may create. it's job is to collect information for us and that it does. if it happens to reveal a hole in your web security, its your fault not googles.
Man, Google is still the best tool and I know it will continue to best the best search engine
I am still pretty new here, but I stick with the idea that I have been reading a lot in this thread: this is not Google's problem, but rather the webmaster's.
I don't think there is a change neccessary, but if there was to be a change, I would hope that it would be one that could alert web masters to the hole. Google's efficiency in searching shouldn't be compromised because of the mistakes of other web masters.
Read this thread, and you'll see even more how google can be used to gather info on sites...you can even get encrypted pw's...
http://www.antionline.com/showthread...hreadid=249336
I think it's the webpages designer's fault ,,,,
their foolness allowed them to add a weak code
Quote:
Originally posted here by da_zero
I think it's the webpages designer's fault ,,,,
their foolness allowed them to add a weak code
You are the weakest link! good bye! haha.
WASSUP MAn ?
I have only been on here for alittle bit, but one thing I learned immediately was not to post useless posts. Now, it is kinda ironic that this post in itself has no point to it and is rambling, but just make sure your posting have a point.
On the topic of google.com what they have accomplished is amazing! Their cache technic is so logical. and YES, I agree with the majority google.com is still best.
i would laugh if someone haxed google to make into a pr0n site, there would be a lot of suspensions in school and confused faces, that wahat happend to 89.com