What is Google Binary Search and Should We Fear it?

["Michael Sutton" <msutton () spidynamics com>]

When Websense went on record
(http://www.pcworld.com/article/id,126371-page,1/article.html) stating
that they were using an undocumented Google search feature to identify
malcode samples, it garnered a fair bit of media attention. A couple of
weeks later when HD Moore released code for his Malware Search project
(http://metasploit.com/research/misc/mwsearch/mwsearch.html) fear that
GBS was an evil tool surfaced once again.

When I finally got around to investigating the mysterious Google Binary
Search (GBS) functionality, I was surprised to find virtually no
documentation on it from Google or any other sources, beyond HD's Ruby
code. In a blog posting that I released today
(http://portal.spidynamics.com/blogs/msutton/) I've detailed what GBS
is, how it works and why the sky won't be falling any time soon.

Michael Sutton
Security Evangelist
SPI Dynamics
http://portal.spidynamics.com/blogs/msutton

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/