full-disclosure - What is Google Binary Search and Should We Fear it?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 14 Sep 2006 22:46:52 -0400
From: "Michael Sutton" <msutton@...dynamics.com>
To: <full-disclosure@...ts.grok.org.uk>
Subject: What is Google Binary Search and Should We Fear
	it?

When Websense went on record
(http://www.pcworld.com/article/id,126371-page,1/article.html) stating
that they were using an undocumented Google search feature to identify
malcode samples, it garnered a fair bit of media attention. A couple of
weeks later when HD Moore released code for his Malware Search project
(http://metasploit.com/research/misc/mwsearch/mwsearch.html) fear that
GBS was an evil tool surfaced once again.

When I finally got around to investigating the mysterious Google Binary
Search (GBS) functionality, I was surprised to find virtually no
documentation on it from Google or any other sources, beyond HD's Ruby
code. In a blog posting that I released today
(http://portal.spidynamics.com/blogs/msutton/) I've detailed what GBS
is, how it works and why the sky won't be falling any time soon.

Michael Sutton
Security Evangelist
SPI Dynamics
http://portal.spidynamics.com/blogs/msutton

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/