I don't know about *easily*.... I mean, we're talking about a database lookup in a table with probably hundreds of thousands records...
-----Original Message----- From: discuss-bounces@lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Daryl C. W. O'Shea Sent: Thursday, April 14, 2005 12:47 PM To: SURBL Discussion list Subject: Re: [SURBL-Discuss] FULL open redirect on google
Matthew Wilson wrote:
I might be wrong, but isn't the below url structure absolutely essential to Google's Adwords service? Otherwise, they
couldn't keep
track of clicks..........
That doesn't mean it hasn't to be an open redirect. They could easily limit it to domains that actually use the Adwords service.
Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss
Isn't that how they pull search results?
John Delisle, CISA Senior Network Analyst, Network and Security Team Information Systems & Technology Management Dept. Ceridian Canada Ltd 600 - 125 Garry St Winnipeg, MB R3C 3P2 204-975-5909
"Matthew Wilson" matthew@boomer.com Sent by: discuss-bounces@lists.surbl.org 04/14/2005 01:18 PM Please respond to SURBL Discussion list discuss@lists.surbl.org
To "SURBL Discussion list" discuss@lists.surbl.org cc
Subject RE: [SURBL-Discuss] FULL open redirect on google
I don't know about *easily*.... I mean, we're talking about a database lookup in a table with probably hundreds of thousands records...
-----Original Message----- From: discuss-bounces@lists.surbl.org [mailto:discuss-bounces@lists.surbl.org] On Behalf Of Daryl C. W. O'Shea Sent: Thursday, April 14, 2005 12:47 PM To: SURBL Discussion list Subject: Re: [SURBL-Discuss] FULL open redirect on google
Matthew Wilson wrote:
I might be wrong, but isn't the below url structure absolutely essential to Google's Adwords service? Otherwise, they
couldn't keep
track of clicks..........
That doesn't mean it hasn't to be an open redirect. They could easily limit it to domains that actually use the Adwords service.
Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss
_______________________________________________ Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss
Matthew Wilson wrote:
I don't know about *easily*.... I mean, we're talking about a database lookup in a table with probably hundreds of thousands records...
Given that they index over 8 billion pages, and likely have hundreds of billions of records in their databases, I'd think dealing with hundreds of thousands of records would be fairly easy in comparison.
Besides, there's no reason to have all of the domains in one table, or even database.
Also don't forget that if they are tracking the click throughs, they've already got those domains in a database. So I'd still say it borders on trivial! :)
-
Daryl C. W. O'Shea -
John_Delisle＠ceridian.ca -
Matthew Wilson