pretty crazy Google SEO hole got plugged

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • lezinterracial
    Confirmed User
    • Jul 2012
    • 3116

    #1

    pretty crazy Google SEO hole got plugged

    In a nutshell, looks like he found a hi ranking site, found an open redirect, then pinged his site through the open redirect.

    Only $1337 reward.

    I am wondering how many people were already using this trick.

    Google bug bounty for security exploit that influences search results - Tom Anthony
    Live Sex Shows
  • freecartoonporn
    Confirmed User
    • Jan 2012
    • 7683

    #2
    he could have made much more than that.
    damn those whitehats
    SSD Cloud Server, VPS Server, Simple Cloud Hosting | DigitalOcean

    Comment

    • Tube Ace
      So Fucking Banned
      • Nov 2008
      • 4941

      #3
      Saw this the other day. Very surprised the guy didn't exploit this.

      Comment

      • shake
        frc
        • Jul 2003
        • 4663

        #4
        Originally posted by Tube Ace
        Saw this the other day. Very surprised the guy didn't exploit this.
        Yup, could have made millions easy.
        Crazy fast VPS for $10 a month. Try with $20 free credit

        Comment

        • Bladewire
          StraightBro
          • Aug 2003
          • 56220

          #5
          Great thread as always lezinterracial i read that article from beginning to end and back again, thank you.

          I'm shocked , and delighted, that it took Google 6 months to fix this AND they only paid $1,337 for something that is going to astronomically change the quality of Google's search results.

          @Tube Ace looking at Google's response, including their denial of importance, length of time to fix, and miniscule bounty, I'm betting there are similar variants of this wide open because Google's foes feel similar behavior has many legitimate uses "..we were unable to get a definitive decision, if it would be possible to address this behavior with the redirect chain without breaking many legitimate use cases."

          So Google thinks similar off domain/cross domain redirect chains to unrelated domains have legitimate uses, even after this bug... interesting.


          Skype: CallTomNow

          Comment

          • SIK
            Confirmed User
            • Dec 2006
            • 1497

            #6
            Originally posted by lezinterracial
            I am wondering how many people were already using this trick.
            I remember back in the day, during my tampering with penis pills and such stuff, some of us "used that trick" to make sure we get the cookie saved on surfer's computer.

            It came down to making MY site navigation something like:

            https://www.penis-pills-mainsite.com....COM/home.html
            and all links in main menu like that

            never imagined it could be done for much more than just cookie shit
            ¤´¨)
            ¸.•´¸.•*´¨) ¸.•*¨)
            (¸.•´ (¸.•`¤ICQ:491 496 482

            Comment

            • Paul&John
              Confirmed User
              • Aug 2005
              • 8619

              #7
              lol and got a l33t reward for this ahahah
              Use coupon 'pauljohn' for a $1 discount at already super cheap NameSilo!
              Anal Webcams | Kinky Trans Cams Live | Hotwife XXX Tube | Get your Proxies here

              Comment

              • bns666
                Confirmed Fetishist
                • Mar 2005
                • 11549

                #8
                Originally posted by freecartoonporn
                he could have made much more than that.
                damn those whitehats
                my first thought also.

                also that wasn't some super secret, there were people selling this as seo service on fiverr few years ago.
                CAM SODASTRIPCHAT
                CHATURBATEX LOVE CAM

                Comment

                • PornDiscounts-V
                  Confirmed User
                  • Oct 2003
                  • 5745

                  #9
                  What a dumbass
                  Blog Posts - Contextual Links - Hardlinks on 600+ Blog Network
                  * Handwritten * 180 C Class IPs * Permanent! * Many Niches! * Bulk Discounts! GFYPosts /at/ J2Media.net

                  Comment

                  • CaptainHowdy
                    Too lazy to set a custom title
                    • Dec 2004
                    • 94045

                    #10
                    Originally posted by PornDiscounts-V
                    What a dumbass
                    More money, more problems?

                    Comment

                    • geedub
                      Confirmed User
                      • Jun 2005
                      • 3489

                      #11
                      They pay $1337 on purpose. Any old schooler should be able to recognize.
                      Reliable web host that actually cares, tell em geedub sent ya. Vacares

                      Comment

                      • Klen
                        • Aug 2006
                        • 32234

                        #12
                        Originally posted by geedub
                        They pay $1337 on purpose. Any old schooler should be able to recognize.
                        My Skype id is misspell of it

                        Comment

                        • WiredGuy
                          Pounding Googlebot
                          • Aug 2002
                          • 34513

                          #13
                          Originally posted by lezinterracial
                          In a nutshell, looks like he found a hi ranking site, found an open redirect, then pinged his site through the open redirect.

                          Only $1337 reward.

                          I am wondering how many people were already using this trick.

                          Google bug bounty for security exploit that influences search results - Tom Anthony
                          Great article, thank you for sharing this.
                          WG
                          I play with Google.

                          Comment

                          Working...