4 ms·
Maybe Google should start working with security firm so that once their bots crawled on a leaked database they will notify the website owner immediately.
by TheOnly92 15y ago
Maybe Google should start working with security firm so that once their bots crawled on a leaked database they will notify the website owner immediately.
- Zakuzaa 15y agoI think Google would rather just not index such data.
- random42 15y agoYes, do not index AND possibly inform the website.
- mike-cardwell 15y agoI can't think of a reason why Google would care... I certainly can't think of a reason why Google would care enough to spend money on staff/research in order to get that type of content out of the index. If you don't want something indexed, don't put it on the web. And sure as hell don't link to it.
- g123g 15y agoTrue, if you are incompetent enough to expose your most sensitive data on the internet yourself, why do you expect others to come to your aid. Even if Google does not index it, what is stopping other search engines from indexing or hackers to get access to it directly. There are lot of tools which will automatically index all the content of a website with the click of a button. So I think it is best to put the onus on the website collecting the user data to protect it. If they cannot, then maybe they should just use some third party authentication and minimize the amount of sensitive data that they need to keep on their servers.
- Joakal 15y agoHow would Google do it with an algorithm to tell whether a database is leaked or not? Get emails from the firm to assess it? Maybe a honeypot email? In that case, it seems far more easier for developers to put in honeypot emails in the databases and constantly query search engines hourly when those become available. That is assuming database gets released, let along exposed for indexing.
- TheOnly92 15y agoWell, you know. A .sql file containing username, password, email is a very high possibility that it's a leaked database.