Pages

A hacker with the name of Nir Goldshlager has posted the information and video showing how an attacker could quickly and easily gain administrative privileges to any Blogger account. The video show off some complex tricks and techniques. Goldshlager did mention that this was for the Google Reward Program,
The seven minute of video by Goldshlager shows how he successfully gained access to a blogger account by adding himself as an author (without the administrators approval), then sends himself a confirmation email, after which the attacker would become an author on the website. Following these steps, the attacker successfully modifies their permissions to become an administrator, allowing full access to add, edit, and delete all the content on the victims blog.

The blog doesn't mention if this vulnerability has been patched by Google or if Google is still unaware of the problem, as the exploit was only posted today.

Google has announced a new feature in its Search Engine called Website Blocking. Through which users can easy block any website which they think is not suitable for them in search queries and then website will not appear in search results in future for them. Users who use the search engine will start to see a new option, 'block all results', that means any future searches will not show any items from the desired domain name.


Users will also be able to change manage their settings with more detail using a new option within the Search Settings screen. From here new sites will be able to be blocked and existing preferences managed and updated. The blog continues to say, "We’re adding this feature because we believe giving you control over the results you find will provide an even more personalized and enjoyable experience on Google."







Google also claim they will be using this information to evaluate the blocks and see how relevant the selected domains will be to future rankings. The new feature is available to all English language searches on Google.com but only if you are using Chrome 9/10, Internet Explorer 8+ or Firefox 3.5+. Other languages and domain extensions are presently being rolled out and will be available soon.