Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Googling Up Passwords
Scott Granneman, 2004-03-09

Google is in many ways the most useful tool available to the bad guys, and the most dangerous Web site on the Internet for many, many thousands of individuals and organizations.

Comments Mode:
Googling Up Passwords 2004-03-10
mwood
Googling Up Passwords 2004-03-10
BCat (1 replies)
Googling Up Passwords 2004-03-13
N.K.
Googling Up Passwords 2004-03-10
Anonymous (1 replies)
Googling Up Passwords 2004-03-11
ComSec
Googling Up Passwords 2004-03-11
Anonymous (1 replies)
Re: Googling Up Passwords 2006-03-31
Anonymous
Googling Up Passwords 2004-03-11
Anonymous
Googling Up Passwords 2004-03-11
Oscar (1 replies)
Googling Up Passwords 2004-03-11
Anonymous (1 replies)
I can confirm that as far as password files in directory listings, they are not honeypots.

I wouldn't be surprised if there are more than a couple defaced sites out there due to information posted within.

So in the case where the victim's site is hosted by another company could fault be placed on them? Is denying directory listings considered proper security measures when hosting client sites?

Perhaps it is too easy to setup a website / host client sites. Maybe some exploitation will convince the public that getting their nephew to setup their company's site is not the best idea.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/224/25342#25342
Googling Up Passwords 2004-03-15
Anonymous
Googling Up Passwords 2004-03-11
Mrdee
Googling Up Passwords 2004-03-12
DRUIDSIX
Googling Up Passwords 2004-03-12
Anonymous
Google is searcher engine or spy !? 2004-03-13
CRKCHAT (1 replies)
Webmasters fools or clever? 2004-03-16
Anonymous
Googling Up Passwords 2005-08-24
Anonymous (1 replies)
Re: Googling Up Passwords 2006-04-06
Anonymous







 

Privacy Statement
Copyright 2008, SecurityFocus