XSS attacks on Googlebot allow search index manipulation

Re:XSS attacks on Googlebot allow search index manipulation by quanticle on Friday July 19, 2019 @09:24AM (#20478404)

Exactly. The breathlessness of the article made no sense to me. It's like someone writing, "Did you know that if someone breaks into your home, they can rearrange the books on your bookshelf‽" Well, yes, of course they can but if someone has broken into my house, unauthorized alphabetization is the least of my worries.

Similarly, if there's an XSS vulnerability on my site, Google search index manipulation is pretty far down on the list of things I'm going to be worried about.

[ Parent | on HN ]

Re:XSS attacks on Googlebot allow search index manipulation by Dylan16807 on Friday July 19, 2019 @01:36PM (#20480761)

Think of it more like a DDOS. If they break into your house, you have bigger worries. If they break into the houses of a hundred thousand strangers, and use them to demonstrate that their site should get all the search results and your site goes on page 5, what can you do?

[ Parent | on HN ]

Re:XSS attacks on Googlebot allow search index manipulation by skrebbel on Friday July 19, 2019 @02:46PM (#20481400)

My compliments on "unauthorized alphabetization".

(and the interrobang, obviously)

[ Parent | on HN ]