What is searchable is a security risk!

General Topics
1

Hi forum folks,

Google can be a secific hacking tool in the hands of some. To know more, read this tutoral http://www.enterpriseitplanet.com/security/features/article.php/3354231 .
So when owner of a website etc. be careful that you check your outgoing links for not giving away security sensitive information. For counter measures: http://www.google.com/remove.html

Yours truly,

polonus

2

For your information, that is really old news.
The vulnarabillity has been patch several months ago already.

3

Hi Eddy,

Of course, this is just an example, there are enough information left if you know what to look for. I am not in to 0 day exploits, this was just a dated example. But I have seen what people could do with a browser tool and a special weak cgi list.
If you want to see what google can do use niktoogle. http://www.frame4.com/cms/news/downloads/niktoogle_1.0_20030606524.html

greets,

polonus

4

Web site developers should exclude what they don’t want checked by the search bots like google using robots.txt file.

User-agent: *
Disallow: /cgi-bin/

Or any other locations that they don’t want indexed. Google isn’t responsible for poor site security. At least Google is giving a way to remove data that it has indexed.