XSS attacks on Googlebot allow search index manipulation

Re:XSS attacks on Googlebot allow search index manipulation by akerro on Friday July 19, 2019 @07:22AM (#20477665)

Mining Monero on googlebot anyone?

[ Parent | on HN ]

Re:XSS attacks on Googlebot allow search index manipulation by sametmax on Friday July 19, 2019 @07:33AM (#20477716)

It's not going to stay long enough on one page to do so.

[ Parent | on HN ]

Re:XSS attacks on Googlebot allow search index manipulation by bennofs on Friday July 19, 2019 @07:42AM (#20477772)

Then distribute it over more than one page.

[ Parent | on HN ]

Re:XSS attacks on Googlebot allow search index manipulation by londons_explore on Friday July 19, 2019 @09:05AM (#20478298)

it stays on a page for 30 seconds, and has a pretty decent CPU.

I'm going to guess you could get a decent amount of monero mined...

Googlebot will only visit a page if it thinks that (on average across the domain), there are ~99 human visitors for every bot visit. So you'll have to hide the monero miner on a popular domain.

[ Parent | on HN ]

Re:XSS attacks on Googlebot allow search index manipulation by codedokode on Friday July 19, 2019 @09:55AM (#20478667)

That definitely is not true. I know sites that have higher share of bot visits than 1%.

[ Parent | on HN ]

Re:XSS attacks on Googlebot allow search index manipulation by lgats on Friday July 19, 2019 @09:43AM (#20478560)

Source?

[ Parent | on HN ]