Google now a hacker's tool (AKA Hide the bong behing the firewall)

[Renew Deal]

Google's massive database contains information that wasn't intended to lie unexposed on the Web, and hackers are using it as a resource for intrusion

By Robert McMillan, IDG News Service
August 02, 2005

Somewhere out on the Internet, an Electric Bong may be in danger. The threat: a well-crafted Google (Profile, Products, Articles) query that could allow a hacker to use Google's massive database as a resource for intrusion.

"Electric Bong" was one of a number of household devices that security researcher Johnny Long came across when he found an unprotected Web interface to someone's household electrical network. To the right of each item were two control buttons, one labelled "on," the other, "off."

Long, a researcher with Computer Sciences Corp. and author of the book, "Google Hacking for Penetration Testers," was able to find the Electric Bong simply because Google contains a lot of information that wasn't intended to lie unexposed on the Web. The problem, he said at the Black Hat USA conference in Las Vegas last week, lies not with Google itself but with the fact that users often do not realize what Google's powerful search engine has been able to dig up.

In addition to power systems, Long and other researchers were able to find unsecured Web interfaces that gave them control over a wide variety of devices, including printer networks, PBX (private branch exchange) enterprise phone systems, routers, Web cameras, and of course Web sites themselves. All can be uncovered using Google, Long said.
<snip>

http://www.infoworld.com/article/05/08/02/HNgooglehackertool_1.html?source=NLC-TB2005-08-02

[Dogmudgeon]

1. Hey, Moondoggie, did you leave the bong on again?

--p!