Plugged In: "Google Hacking" Digs Up Sensitive Material

Reuters ^ | February 13, 2005 | Andy Sullivan

[anniegetyourgun]

Yikes!

[demlosers]

Yes, Google search bots can find out a lot.

[coloradan]

One Google search, a couple of buttons - can we turn off Reuters?

[JoJo Gunn]

ping

[tioga]

better yet, shut down du?

[sure_fine]

just did this morning skim though a book at Barnes*Nobles


Google Hacking, alot of scripts to copy and setup

[montag813]

Anybody with a Web site should Google themselves using a "site:" query that lists every Web site they have available online, Long said.

Can someone please explain how to do this.

[bahblahbah]

For instance, go to google and type "site:google.com" and that shows you all the pages google has used its spider on IIRC.

Another trick you can use if a webpage doesn't load is to type "cache:somewebsite.com/blah/blah/blah.html" and that would bring up that webpage.

[demlosers]

To ensure your web site(s) are not showing more than you want it/them to show to the Internet Googling public.

[dufekin]

Let us say that you want every web page on Free Republic.

(1) Go to http://www.google.com

(2) Type "site:freerepublic.com" into the box

(3) Press "Google search" button

(4) See 2,800,000 web pages listed (apparently in no particular order)

[Fresh Wind]

Bots such as Google are supposed to respect the directives contained in a simple text file "robots.txt" located in the home directory of a website. Every web site SHOULD have one of these. This file instructs bots to ignore specific directories. For example, here is Free Republic's robots.txt file (no hacking required to see it):

User-agent: *
Disallow: /perl/
Disallow: /search/
Disallow: /focus/f-news/search
Disallow: /focus/keywords

It tells all bots to stay out of the listed directories. Well behaved bots (Google et al) will respect this file. Others may not.

[southland]

ping

[demlosers]

Google hackers can download Department of Homeland Security threat assessments marked "For Official Use Only."

The compilation of possible security incidents across the United States in police blotter form. Here it is on-line for the world to see:

http://cryptome.org/hsomb/hsomb.htm

[jslade]

better yet, shut down du?

Naw, let's keep them around. The DUmmies are too entertaining.

[demlosers]

-snip-

"Homeland Security Operations Morning Brief
11 January 2005

NOTICE: This document may contain initial and preliminary reporting which may or may not be accurate or be supported by corroborative information. The HSOC is actively evaluating the reporting to establish its accuracy and to determine if it represents a possible link to terrorism. If recipients have any additional or clarifying information, please contact the Homeland Security Operations Center Senior Watch Officer (HSOC SWO) at (202) 282-8101

1. (FOUO) NEW YORK/TURKEY: No-Fly Listee Aboard Aircraft. According to TSA reporting, on 9 January, at JFK airport, Turkish citizen Kursheed BEGUM boarded a Turkish Air flight bound for Istanbul. NTC confirmed that BEGUM was a positive match for the No-Fly list. There were no Air Marshals, VIP’s or high-value cargo on the aircraft. Authorities determined BEGUM was not a threat and removed her from the No-Fly list.(TSA e-mail, 10 January 05; HSOC 0097-05)

-snip-

3. (FOUO) CALIFORNIA / PANAMA: Refusal of Admission on Terrorist Organizational Ties. According to CBP reporting, on 8 January, Los Angeles Airport (LAX) CBP reported that Venezuela national Ali Hachem DAHROUGE (DOB: 11181974), arriving from Panama was an exact TIPOFF match. DAHROUGE was traveling with his brother Colombian national Wisal Chakib Hachem HACHEM (DOB: 05241974). Additional CBP information revealed that DAHROUGE is likely to engage in terrorist activities, and is a member of a foreign terrorist organization. HACHEM has an association with a terrorist organization. FBI and ICE interviewed the subjects and recommended that they not be allowed into the United States. Both were allowed to withdraw their application for admission, and will be returned to Panama on 13 January. (BTS Daily Operations Report, 13 Jan 05, HSOC 0160-05)

-snip-

2. (FOUO) MARYLAND: Agents Search Home of Man Suspected of Illegally Exporting Military Items to China and Iraq. According to ICE reporting, on 11 January, Washington, DC ICE Agents executed a search warrant at the Potomac residence of a named Polish national and lawful U.S. permanent resident. Agents recovered documents, a computer, and a firearm from the residence. The subject is under investigation for violations of the Arms Export Control Act (AECA) relating to alleged illegal exports of military items to the People’s Republic of China and Iraq. He is currently in custody for immigration violations relating to a prior felony conviction. (ICE Daily Summary of Operational Report, 13 Jan 05; HSOC 0183-05-05)"


Has someone checked the Clintonites' houses too. *snicker*

Interesting to read.

http://cryptome.org/hsomb/hsomb.htm

[MississippiMan]

If you want to see a pretty comprehensive list of easy Google hacks, click here. You can take control of webcams, printers, routers, all manner of stuff. Do note that unauthorized use of such resources may well be illegal, so I recommend that you don't do it, but it's still an eye-opener to just look at the list of things that CAN be done.

MM

[lepton]

bump

[RhoTheta]

Web Security ping!

[Splatter]

I had a company repeatedly call my home phone using an auto-dialer. Using caller ID, google, and few other tracing techniques, I locate the company name and employee. The fax/auto-dialer was located at her home. Within an hour I had found her name, home address, home phone, cell phone, fax number and voice mail.

Then the fun began (EG). Needless to say, the called promptly stopped.