Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Finding unprotected streams via Google Dorking like this is easy. Here's an article that doesn't cover this particular use case, but rather the broader practice:

https://exposingtheinvisible.org/guides/google-dorking/

I've personally dabbled with it a bit in the past, and while I didn't find anything particularly interesting, it did make me a bit more cautious about enabling anyone with a link to access a Google Doc. With a good enough scraper or even just a lot of patience, there are a lot (potentially sensitive) data out there for people to harvest. That's not to say there aren't a number of benefits to having access to advanced search tools though, just that individual mindfulness when making something completely open for anyone to access is all the more important.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: