Re:XSS attacks on Googlebot allow search index manipulation
by quickthrower2 on Friday July 19, 2019 @08:01AM
(#20477886)
Nicely laid out for the black hatters!
[ Parent
| on HN ]
Re:XSS attacks on Googlebot allow search index manipulation
by whitten on Friday July 19, 2019 @08:16AM
(#20477944)
Hard to decide. Should the white hatters get enough information to deal with a problem at the risk of informing the black hatters something they did not know?
Or do you assume the black hatters already have access to all the information they want to know, and it is only the white hatters who are left in the dark by hiding information ?
Re:XSS attacks on Googlebot allow search index manipulation
by anaphor on Friday July 19, 2019 @08:47AM
(#20478158)
They are probably already aware of this if they do this sort of black hat SEO type stuff.
Re:XSS attacks on Googlebot allow search index manipulation
by ryanlol on Friday July 19, 2019 @09:35AM
(#20478492)
Yeah, this particular technique is as old as the hills.
CVE-2007-1287 was abused for this specific purpose over a decade ago, and remnants of that still occasionally show up in google indexes.