Full Disclosure mailing list archives

Re: search engine proxy


From: Nate Campi <nate () wired com>
Date: Wed, 23 Jun 2004 08:12:27 -0700

Geo. wrote:

I believe it was on this list that someone once mentioned a way to use
either google or yahoo as a proxy server by typing in something in the
address bar of a browser.

Anyone recall this?

I think I know what you mean. Portal-type and search providers often have HTTP servers meant for logging and redirecting clicks on search results. Spammers and similar ppl who wish to hide the real destination of a URL abuse these services. It can be quite hard to prevent this abuse. :(

You'd have a URL something like http://redirect.foo.example/redirect.cgi?http://spam.phishing.evil/ccinfo.html

I choose not to share any information on abusing these services, not because it's particularly secret, but because I don't really want to share it with kiddiez who don't already know how to find this information.

Nate

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: