Kid finds HUGE security hole affecting Google and other major sites...

[Ichinisan]

Proof of concept:
http://www.youtube.com/watch?v=SXmv8quf_xM

Google will have to fix this soon. Please do not abuse it!

 

[SSSnail]

srsly... this was recorded in 1845.

 

[RavenSEAL]

So it gives you a list of IPs connecting to the website you specify?

 

[Ichinisan]

So it gives you a list of IPs connecting to the website you specify?

No.

 

[SSSnail]

So it gives you a list of IPs connecting to the website you specify?

Not sure if serious...

Wait, YOU recorded that video, didn't ya?

 

[yh125d]

see some peoples connections rise real good and some peoples go down

 

[RavenSEAL]

Not sure if serious...

Wait, YOU recorded that video, didn't ya?

Not serious if sure...:sneaky:

 

[WelshBloke]

Wow 10 people are looking at Google. They gonna need a new server.

 

[Number1]

The video is dated 2008.

 

[PhoenixEnigma]

Did I really just waste 5 minutes watching a video on tracert?

 

[Ichinisan]

Did I really just waste 5 minutes watching a video on tracert?

Yes

 

[DrPizza]

So, there are TEN people using google at 10:13pm (some time zone) when he made that video. LOL!

 

[lxskllr]

Did I really just waste 5 minutes watching a video on tracert?

No, that's something else. This is TracerT. One is used to check routing, and the other is for haxing.

 

[Lifted]

This must be a repost, but it's a good one.

lol @ tracer - t

did anyone ever figure out if this video was a troll?

 

[Joseph F]

No, that's something else. This is TracerT. One is used to check routing, and the other is for haxing.

I wonder if TridenT had something to do with it... :hmm:

 

[her209]

I'm going show this to my boss.

 

[destrekor]

LOL

 

[wedi42]

He has AOL installed, he must be L33t Haxor

 

[CRXican]

RE

 

[cKGunslinger]

That is.. awesome! :awe:

 

[Away]

:biggrin:

 

[Doppel]

Google just shut down this vulnerability, doesn't work anymore!

 

[Lifted]

Google just shut down this vulnerability, doesn't work anymore!

You're right. I wonder how they resolved it.

 

[Albatross]

That kid is a newb,I hack sites with ping command.

 

[Red Squirrel]

LMAO this is hilarious. "Oh look these are sharing the same server" omg I'm just ROFL right now. As soon as I saw the use of http:// in the tracert command I knew this was fail. I'm surprised that even worked...

Edit: Interesting, I just realized my ISP stopped blocking ICMP outgoing traffic so I can actually do tracerts and ping now. I also just realized that my internet traffic goes to the east coast then through the states to go to my server that's in my province. How inefficient.

C:\Documents and Settings\ryan>tracert ut3.uovalor.com

Tracing route to ut3.uovalor.com [96.45.178.186]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  firewall.loc [10.1.1.1]
  2    10 ms    12 ms    42 ms  196-226-gateway.nt.net [209.196.226.1]
  3     9 ms    13 ms    40 ms  209NTL226-57-5.nt.net [209.226.57.5]
  4    16 ms    29 ms    26 ms  xe-7-1-0.bx01.toro.on.aliant.net [207.231.227.13
7]
  5    69 ms    41 ms    34 ms  xe-8-2-0.cr02.mctn.nb.aliant.net [207.231.227.10
6]
  6    73 ms    38 ms    37 ms  xe-8-2-0.cr02.drmo.ns.aliant.net [142.166.185.13
3]
  7    77 ms    57 ms    52 ms  xe-8-1-0.cr02.hlfx.ns.aliant.net [142.166.185.73
]
  8    52 ms    52 ms    53 ms  te-0-0-0-3.bx01.nycm.ny.aliant.net [207.231.227.
10]
  9    58 ms   102 ms    63 ms  xe-2-0-0.asbn.va.aliant.net [207.231.227.86]
 10    94 ms    59 ms    60 ms  equinixexchange.peer1.net [206.223.115.30]
 11    65 ms    64 ms    59 ms  10ge.ten1-2.wdc-sp2-cor-1.peer1.net [216.187.115
.234]
 12    58 ms    85 ms    86 ms  216.187.120.254
 13    75 ms    98 ms    70 ms  10ge.xe-2-0-0.nyc-telx-dis-1.peer1.net [216.187.
115.221]
 14    76 ms    80 ms    79 ms  10ge.xe-2-1-0.tor-151f-dis-1.peer1.net [216.187.
114.193]
 15    88 ms    80 ms    80 ms  72.51.9.92
 16    78 ms    87 ms    84 ms  ge-3-48.core.hamilton.caratnetworks.com [173.234
.189.2]
 17     *        *        *     Request timed out.
 18     *     ^C
C:\Documents and Settings\ryan>