3 ms·

Hi, former pentester here. If any one of your trusted clients is using a google/chromium based browser, the telemetry from that browser (webdiscovery) would re

Hi, former pentester here. If any one of your trusted clients is using a google/chromium based browser, the telemetry from that browser (webdiscovery) would reveal the existence of the subdomain in question. As others have said, security by obscurity doesn't work.

geek_at 2y ago
Current pen tester here and this guy is right. There was a Google blog post years ago where Google planted a site with an unguessable url and indexed it and used edge to surf on the site. Shortly after this site was also listed on Bing. Google had a "gotcha" moment when Microsoft responded basically with "yeah we didn't steal it from Google, you had telemetry enabled" Total shitshow
- 3np 2y ago
  Would love to read this if a link is still around
  - treesknees 2y ago
    The Bing Sting! https://googleblog.blogspot.com/2011/02/microsofts-bing-uses-google-search.html?m=1 https://googleblog.blogspot.com/2011/02/microsofts-bing-uses... https://www.bbc.com/news/technology-12343597 https://www.bbc.com/news/technology-12343597 https://news.ycombinator.com/item?id=2165469 https://news.ycombinator.com/item?id=2165469 https://moz.com/blog/the-bing-sting-facts-why-bing-arent-copying-google-11924 https://moz.com/blog/the-bing-sting-facts-why-bing-arent-cop...
webpagealert 2y ago
[flagged]