[LINK] google search hidden redirects

[Kim Holburn]

Interesting article here:

http://www.reddit.com/r/netsec/comments/1ah2gq/hacking_the_a_tag_in_100_characters_deviously/

The interesting part is in the comments.  Up near the top there's a comment by neilk explaining how google search pages redirect your click through google then on to the site you supposedly clicked on. 

Further on alkw0ia explains that google then sends additional referrer details if they are redirecting you to a partner.

Finally next UberNube explains how to stop google doing it using the redirector add-on in firefox.

Creating a rule with:

Include Pattern:    .+google.+/url\?.*url=([^&]*).*
Exclude Pattern:    none
Redirect To:        $1
Unescape Matches:   Yes



-- 
Kim Holburn
IT Network & Security Consultant
T: +61 2 61402408  M: +61 404072753
mailto:kim at holburn.net  aim://kimholburn
skype://kholburn - PGP Public Key on request