Avast WEBforum

Other => General Topics => Topic started by: bob3160 on November 02, 2006, 12:54:12 AM

Title: Google thanks bug hunters
Post by: bob3160 on November 02, 2006, 12:54:12 AM
Google is giving friendly bug hunters an ego-boost.

A new page, quietly added to Google's corporate Web site last month,
gives information on the security and safety of the company's Web properties.
It also includes a list of people and organizations that Google wishes to thank for reporting security vulnerabilities to it.

That's a first among major Web companies, security researchers say.
Full story available here (http://news.zdnet.com/2100-1009_22-6131515.html?tag=nl.e589).
Title: Re: Google thanks bug hunters
Post by: polonus on November 02, 2006, 09:57:56 AM
Hi bob3160,

Thank you for reporting, but there are still a trillion way we are being spammed out of our socks. Hi inconnu,

Well it is a pity really. Andl there are some ways of obfuscating, like "Lost in Google's Crowd": http://www.techweb.com/wire/security/192202583 As long as you stealth surf the other services of Google you are safe. The obfuscating of "Lost in..."can also be used for Yahoo etc. Well the same story we tell about Google re: Firefox can be told for Flock re: Yahoo.
Another thing that is endangering users are the spam-redirects, that are more and more being used by malware authors (read here: http://ha.ckers.org/blog/20060807/google-spam-redirects/ )
. Read about Google's demise in this respect here:
http://www.searchlores.org/google.htm#spamming A way to conquer this influence of SEO: http://www.searchlores.org/nemo_SEO.htm A example of clever search engine spam is this image code: <div style="COLOR:black;display:none;FONT-FAMILY:’Verdana’;"><a href="http://www.onestat.nl" style="text-decoration:none;"> made not functional (here should be a hidden counter/a></div>

So Google-ads also has a sinister side to it. The main threat however considering malware vectors is and will be script (NoScript installed should be your first line of defense).
here is a helpful add-on to edit cookies here (works on FF 2.0): http://home.tula.net/cbin/addneditcookies-0.2.2.0.xpi
If you are using Torpark for anonimyty reasons, you better block the Tor servers that operate within the address range of your own ISP (especially when your provider is a larger one): http://www.sectoor.de/tor.php You always use Torpark with NoScript on and Stealther active, and take care that the points where you enter and leave Torpark are anonimyzed ( see: http://www.searchlores.org/anonykid.htm )
Read: http://www.sectoor.de/tor.php
Tamper data can help you to filter your browser against certain cookies and bugs that try to track all you do on the Net. Know that all your activities on the Net will be filtered, and that the content industry is trying to make your ISP comply with implementing content filtering (as they say for security reasons and to protect users against violations of DRM). Therefore as long as you can use open software apps that work with windows, there is a lot of free possibilties: http://www.searchlores.org/bangla.htm

Windows cleaning tips after your surf-session is done: http://www.searchlores.org/fiatlu/recommand.html


polonus
Title: Re: Google thanks bug hunters
Post by: CharleyO on November 02, 2006, 06:22:16 PM
***

Along with what Polonus posted above, here is a link for a more basic cleaning of Windows and IE. This was written back in January 2006 and some thing may be a little different for IE7 ... though I am sure if you think about it, you will be able to find the same results in IE7.

http://72.14.207.104/search?q=cache:5Unub82TA4wJ:scscc.com/jan/Cookies,%2520Temporary%2520Files,%2520Managing%2520Favorites.doc+bad+cookie+list&hl=en&ct=clnk&cd=28

***
Title: Re: Google thanks bug hunters
Post by: bob3160 on November 03, 2006, 12:05:54 AM
You could also just run CCleaner (http://www.ccleaner.com/) and get rid of all the crap.  ;D