Google: Hacker&#39;s Best Friend?
34205
The first exploitations of Google&#39;s (Nasdaq: GOOG) peculiar search algorithms were humorous, political, or both. I&#39;m referring the once-popular procedure of Google Bombing, a way
576711
Google has a problem -- a good one.
555338
Security researchers have discovered a serious flaw in Google Inc.'s desktop software that could be used to wreak havoc on a victim's computer.
679280
InfoWorld - Security researchers have discovered a serious flaw in Google&#39;s desktop software that could be used to wreak havoc on a victim&#39;s computer.
272309
People who use public or workplace computers for e-mail, instant messaging and Web searching have a new security risk to worry about: Google&#39;s free new tool that indexes a PC&#39;s contents for quickly finding data.
146555
Do you know what pops up when you Google yourself? You should, because odds are someone you work with or know does. A study released last month by Harris Interactive and Dogpile, a search engine run by InfoSpace
134325
With four in the last week, is Google the next security buffoon? Analysis Google's desktop search application is vulnerable to an exploit that allows a determined attacker to remotely run most programs installed on a victim's machine. The flaw is one of at least four security holes to visit Google this past week, demonstrating that the search king, despite the god-like aura it enjoys for its pleasing software designs, remains a mere mortal in the security cosmos.â¦
135588
Search engine darling Google has patched a hole in its search engine the could have allowed malicious hackers to modify the content of the Google search results page or silently modify search results, but a new hole may have already appeared.
249028
Google&#39;s latest service, Desktop Search, promises to be one of its most interesting innovations, and also one of its more controversial ones.
251122
Blog: Hackers offer their take on Google's Street View feature.
716677
Google responds to attacks on its privacy record.
85579
(InfoWorld) - Google Inc. has inadvertently given online attackers a new tool. The company'sÂ new source-code search engine, unveiled Thursday as a tool to help simplify life for developers, can also be misused to search for software bugs, password information, and even proprietary code that shouldn't have been posted to the Internet in the first place, security experts said Friday. UnlikeÂ Google's main Web search engine,Â Google Code Search peeks into the actual lines of code whenever it finds source-code files on the Internet. This will make it easier for developers to search source code directly and dig up open-source tools they may not have known about, but it has a drawback. "The downside is that you could also use that kind of search to look for things that are vulnerable and then guess who might have used that code snippet and then just fire away at it," said Mike Armistead, vice president of products with source-code analysis provider Fortify Software Inc. Attackers could also search code for vulnerabilities in password mechanisms, or to search for phrases within software such as "this file contains proprietary," possibly unearthing source code that should never have been posted to the Internet. Security experts say that the security implications of Google Code Search are noteworthy, if not earth-shattering. Skilled hackers may already be able to do this type of search with Google's Web search engine, but Code Search is "another tool that makes it a tad easier for the attacker," said Johnny Long, a security researcher with Computer Sciences Corp, in an e-mail interview. For its part, Google did not have much to say about possible misuse of its new product. "Google recommends developers use generally accepted good coding practices including understanding the implications of the code they implement and testing appropriately," the company said in a statement. Google has never said much about the steps it takes to cut down on this kind of misuse of its search engine, though the issue comes up from time to time.Â In July, Websense Inc. used a little know binary search capability within Google Inc.'s search engine to look for malware on the Internet. While Google Code Search will probably not have much of an effect on popular open-source projects, which are already heavily scrutinized, it could help ferret out vulnerabilities in lesser known pieces of code, according to Lev Toger, a software developer with Beyond Security Ltd. "Using Google's code search, it's much easier to find interesting code portions," he said via e-mail. "If your task is to find vulnerability in some random code, this filtering can save you a lot of time. " Â
251507
Faced with ultimatum, Google finally responds Google researchers have at last responded to a hacker who says he's uncovered more than 40 YouTube flaws that put users at risk.â¦
128764
Google isn&#39;t conventional and so aren&#39;t its co-founders. Meeting them is pure fun. Larry Page and Sergey Brin founded this search engine and have been applying some really unconventional approaches to constantly
196360
Google has patched a hole in its search engine that could have allowed malicious hackers to modify the content of the Google search results page or silently modify search results.
339881
The logic behind Google (GOOG ) Desktop Search is simple enough: Why shouldn&#39;t the best tool for finding things on the Web do equally well at helping people search their own computers?
669209
Ziff Davis - Google's phishing vulnerabilities could foretell new security threats for major Internet companies cozying up to the desktop.