Comments on: iFrame Piggybacking on Google Searches to Install Malware http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/ Ethical Hacking, Penetration Testing & Computer Security Tue, 14 Feb 2012 00:17:07 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Pantagruel http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/#comment-122578 Pantagruel Wed, 02 Apr 2008 09:08:26 +0000 http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/#comment-122578 @ZaD MoFo Thanks for the blog hint. Danchev has been indeed following the iframe inject problem for quite some time (judging by his blog entries). He also touches some other problems and phenomena which are good reading stuff. @ZaD MoFo

Thanks for the blog hint.
Danchev has been indeed following the iframe inject problem for quite some time (judging by his blog entries). He also touches some other problems and phenomena which are good reading stuff.

]]> By: ZaD MoFo http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/#comment-122571 ZaD MoFo Tue, 01 Apr 2008 22:10:34 +0000 http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/#comment-122571 Again the stupid idea of being the biggest or the best! Google had in a way ejected all the others search engine from what was a choice act. But when the near ONLY choice get contaminated with malware, how come a simple answered question could bring such great security treat. Google now is a big business and will take long to react. This is the price to pay for a single source of answers. By the way, Dancho Danchev, a blog I visit frequently, made a fabulous investigative work on the subject. Again the stupid idea of being the biggest or the best!

Google had in a way ejected all the others search engine from what was a choice act. But when the near ONLY choice get contaminated with malware, how come a simple answered question could bring such great security treat. Google now is a big business and will take long to react. This is the price to pay for a single source of answers.

By the way, Dancho Danchev, a blog I visit frequently, made a fabulous investigative work on the subject.

]]> By: Pantagruel http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/#comment-122570 Pantagruel Tue, 01 Apr 2008 19:12:33 +0000 http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/#comment-122570 @goodpeople Indeed it's always a pain to explain why people should refrain from this 'apperently' handy piece of software. @goodpeople

Indeed it’s always a pain to explain why people should refrain from this ‘apperently’ handy piece of software.

]]> By: goodpeople http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/#comment-122561 goodpeople Tue, 01 Apr 2008 12:59:42 +0000 http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/#comment-122561 It would be a good day if this marked the end of the Google/Yahoo etc. searchbars.... It would be a good day if this marked the end of the Google/Yahoo etc. searchbars….

]]> By: zupakomputer http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/#comment-122560 zupakomputer Tue, 01 Apr 2008 12:39:53 +0000 http://www.darknet.org.uk/2008/04/iframe-piggybacking-on-google-searches-to-install-malware/#comment-122560 As the article says, this is taking advantage of the way the searches are indexed. I've never agreed with those kinds of methods of returning searches; I'm not interested in what other people looked for - I'm interested if the website creator says they have whatever info I'm looking for (in their tags) and have specified or if the text or images (or whatever else specified) contains the terms I typed in. Search engines tend to be awful and they've been getting worse for years; thesedays your finding what you really wanted is wholly dependant on someones else having also searched for the same thing. I remember when the phrase or keyword you typed actually retuned results and ALL of them contained that phrase / keyword. There's too many results thesedays that also claim to have what you typed in - and you go to the page.....and there's nothing there to do with it, then there's the ones that direct you to: another search engine. Rubbish. As the article says, this is taking advantage of the way the searches are indexed. I’ve never agreed with those kinds of methods of returning searches; I’m not interested in what other people looked for – I’m interested if the website creator says they have whatever info I’m looking for (in their tags) and have specified or if the text or images (or whatever else specified) contains the terms I typed in.

Search engines tend to be awful and they’ve been getting worse for years; thesedays your finding what you really wanted is wholly dependant on someones else having also searched for the same thing.

I remember when the phrase or keyword you typed actually retuned results and ALL of them contained that phrase / keyword. There’s too many results thesedays that also claim to have what you typed in – and you go to the page…..and there’s nothing there to do with it, then there’s the ones that direct you to: another search engine. Rubbish.

]]>