Re: Google Getting (even) smarter

From: Jordan Wiens (numatrix_at_ufl.edu)
Date: 02/27/05

  • Next message: Marcus Haebler: "Breaching dual homed hosts?"
    Date: Sun, 27 Feb 2005 14:26:10 -0500 (EST)
    To: Josh Zlatin-Amishav <josh@tkos.co.il>
    
    

    Besides case, it also looks like they're using a unicode preprocessor on
    the filter too. You used to be able to evade it by "inurl%3Aviewt%6fpic",
    for example, (in the url, not the browser; the browser will escape the %)
    but now they've fixed that as well.

    -- 
    Jordan Wiens, CISSP
    UF Network Security Engineer
    (352)392-2061
    On Sun, 27 Feb 2005, Josh Zlatin-Amishav wrote:
    > Google has now broadened their filter range. A simple inurl:viewtopic
    > gets blocked too with the imfamous message:
    >
    > ===================================================
    >
    > We're sorry...
    > ... but we can't process your request right now. A
    > computer virus or spyware application is sending us
    > automated requests, and it appears that your computer
    > or network has been infected.
    >
    > We'll restore your access as quickly as possible, so
    > try again soon. In the meantime, you might want to run
    > a virus checker or spyware remover to make sure that
    > your computer is free of viruses and other spurious
    > software.
    >
    > We apologize for the inconvenience, and hope we'll see
    > you again on Google.
    >
    > ==================================================
    >
    >
    > Notice that there is no mention of php in the query. This is probably in 
    > response to the recent PhpBB path disclosure vulnerability.
    >
    > Note: In the old days one could circumvent the php filter by changing
    > case (i.e. pHp) but that no longer works. You can still circumvent the
    > google filter by using a smarter query like some intext or a different
    > inurl phrase.
    >
    >
    

  • Next message: Marcus Haebler: "Breaching dual homed hosts?"

    Relevant Pages

    • Re: I cant post to this group
      ... are only found on Google, although they confuse the issue by ... news servers - many of them free (usually means the user gets to receive ... Email spam filter here is pretty harsh - so I rarely see spam any more. ...
      (alt.computer.security)
    • Re: dll version, possible from VB? Solved
      ... With no script, no cookies, no animated GIFs, ... I rarely see ads. ... I put a Google PR ... The full-scale version of the filter reports every ...
      (microsoft.public.vb.general.discussion)
    • Re: [dialog] scripts and wiki
      ... A better response would have been to not post from Google Groups or to ... They don't filter Gropers. ... but those images with the squiggly letters were too much ...
      (news.software.readers)
    • Re: I apologize
      ... > on the usenet boards. ... Google didn't "take over" these boards. ... > I would happily filter Handelman, ... filter or simply by recognizing his name and skipping those posts. ...
      (rec.music.opera)
    • Re: ADV: New Dance Event
      ... would even display in Lynx). ... so your filter shouldn't be excluding it. ... G2 is what Google calls itself. ... I'm using the AdBlock Plus extension and my own filterset. ...
      (rec.arts.dance)