Slashdot Mirror
Hackers' Latest Targets: Google's Webmaster Tools
jfruh writes: The latest attack vector hackers are taking advantage of: Google's Webmaster tools, which allow domain owners to index new pages for searching and react quickly to Google-detected malware. It's that last capability that hackers are after, tweaking things to keep infected sites under their control longer. From the ITWorld story: "According to the Sucuri researchers, by becoming verified owners for compromised websites, attackers can track how well their BHSEO campaigns perform in Google Search. They can also submit new spam pages to be indexed faster instead of waiting for them to be discovered naturally by Google's search robots, they can receive alerts if Google flags the websites as compromised, and, most importantly, they can remove legitimate owners of the site from the Search Console."
The law of Unintended Consequences in action, folks.
Just cruising through this digital world at 33 1/3 rpm...
yu could just say "lastest attacks" or "latest type of attack"
using vector is puffing things up with an important two dollar word
I suppose in combat, esp aerial combat, it might have a precise meaning
Define your fucking acronyms on first use. You been told this a thousand times, for fucks sake!
What the fuck is a BHSEO?
Notice how they wrote TFA; "black hat search engine optimization (BHSEO)". Spell it out, bracket the acronym, and then you can use the acronym alone for the rest of the article. It's common sense. It's how it's done. It's how it's been done for decades and maybe centuries. Get a clue you illiterate retards!
The headline says that Google webmaster tools (wmt) is the TARGET. That's more correct than saying wmt is the vector, because vector actually does have a specific meaning in information security. Calling wmt the "attack" would also be wrong.
The vector is basically the specific method used in an attack. An attack is an event, in which an actor exploits a vulnerability , using a specific vector, against a target. The vector is HOW the attacker gains control of the gmt account.
You're a hoot at parties, aren't you?
We can't all be the clown.
Personally, I think the hackers are bored. Misdirected. And if you were to watch the Borg from Star Trek, it's hard not to draw an analogy to the Borg's relentless pursuit consuming biology and technology - but for no real reason - which begs the question "What is the purpose?".
Oh I know, I know. You hackers love seeing 'pwned by so-and-so'
It's like a leaderboard on a video game, right? The more you see your name in highlights, the more points you score?
To what end? i mean. Did you really win any games?
We all know you have the ability to infiltrate pretty much any system and circumvent anything, anywhere. You've proven that much already.
But me. Being a pseudo hacker, not a real one, I just like pretending to be but in all honesty I am a novice...
I can't help but ask.
Once you've caused anarchy. Brought it all down. What next?
You're top of the poo pile now, CEO of dog poo, and with all the money in the world - you are now in charge of rebuilding the poo infrastructure because life, quite frankly, was better and you enjoyed not having to watch your back which was there with the lifestyle that was in place before you started tearing it all down.
But can you see past your own poo to know there's something your crazy mad skills as hackers and security experts can offer this world?
Can you see past your own poo to realize there's more you can do with your skills than defense and offense?
Can you see past your own poo to realize you - as a collective community - can actually make people feel good with your skills? That you can help someone who's had a bad day? That you can right wrongs?
Or are you that insecure and does your ego need stroking constantly and are you incapable of doing these things without recognition, and as a result, you choose to rip apart the society you hold in such contempt?
I see great things being possible for all hackers.
But not as long as you're unwilling to make the conscious choice to help rather than harm with those skills.
And if you're legitimate with your skills working in security, intelligence, or something of the like.
As long as you're ascribing to the mental story that you are defending those in need, you're only going to be playing a never ending giant game of whack a mole.
You deserve better than that.
I as a homeless man know you do.
Note the lack of replies? Google's crony sockpuppets are struck speechless!
Lost virus, trojans and the rest to all encompassing malware...
Is where I screwed up with the webmaster tools. Taking their word for it used the same address and the two, tools and domain wouldn't work.
Cheap Google domains then you find you have to have webmaster tools at a monthly rate then a domain server rate, nickeling and diming one to a death.
I thought Google dropped the "Webmaster's Tools" naming in favor of "Search Console"?