Charles Arthur On Technology

Google-eyed monsters

I can't recall where or how I first heard the title of John Brunner's book,
The Shockwave Rider, but know that the conjunction of those words intrigued me long before I got the chance to read it. What would a "shockwave rider" do? What would they look like?

I can't recall where or how I first heard the title of John Brunner's book, The Shockwave Rider, but know that the conjunction of those words intrigued me long before I got the chance to read it. What would a "shockwave rider" do? What would they look like?

On finding the book, some time in the 1980s, I discovered that Brunner had imagined a future world of computers linked with each other, forming a giant network retaining huge amounts of information. The central theme was of the hero's struggle to expose the forces trying to keep information secret; the shock wave he unleashes on the world is a program called a "worm" that passes from computer to computer and gets each one to declassify its secrets, making all knowledge available to everyone.

Oh, how clichéd, you say. Except that Brunner wrote it in the early 1970s, long before the internet, and not long after the concept of computer viruses had been developed. His book described an internet society rather well, given that Brunner had to imagine how it would work from first principles. As he later observed, his insight was simply to assume that human nature would continue as normal, and that the technology would be warped to fit our needs, for good or bad. Most of all, he noticed that people tend to take the path of least resistance in trying to solve a problem, which can leave all sorts of loopholes that can be exploited by those who understand the underlying system. Fast forward 30 years from Brunner's work, and we have the internet, and we have search engines which can act rather like his imagined worm, logging every last detail of what's out there.

Let's start with a gentle example. Type the phrase "Welcome to Adobe GoLive 5" into Google, and you'll get 459,000 results. From the top result (a page on Def Jam records for Ashanti) through to the last, they've all got that text somewhere on the page. Where? Well, right at the top of the window - it's the default title of a page written using Adobe's web design tool, and if a designer doesn't get rid of it at the draft stage, the mistake will remain for all to see. Step up a gear. What if you wrote a piece of software which will insert an invisible bit of text on a webpage which has been produced with a copy that hasn't been properly registered? The text could be part of a HTML tag, perhaps a comment or footer, which wouldn't stand out to the inexperienced user as meaningful. But when you, running the software company, did a search engine sweep for that particular tag, you could instantly pick up those copies which were unpaid for.

The all-seeing eyes of the search engines cut both ways. Webmasters are torn between the conflicting desire to let search engines' "spiders" into their site to index what's there (so people looking for relevant things will come there) and the wish to constrain where those spiders go amidst the documents. It might sound simple, but on a sprawling site that pulls in pages from many directories, it isn't. And that is how Google has begun to be used as a resource by hackers looking to find ways into sites, seeking out valid credit card numbers and holes in the system - along the lines of "Welcome to Adobe GoLive 5", but more sophisticated - that they can exploit. Some even go as far as to change the way their browser presents itself to sites, so they appear to be the "Googlebot". And most sites will let that one in, even to view paid-for content, in the hope people will be directed towards those pages via the search engine index.

But that also means that all sorts of content that used to require a lot of physical effort to find - a trip to the courts or local council - can now be done online. And sensitive information can be left for all to see. "If you don't want the world to see it, keep it off the web," Johnny Long, a computer researcher and author of Google Hacking for Penetration Testers told the ExtraMSN news site recently. He has his own site, at http://johnny.ihackstuff.com, with many examples of "malicious" Google searches. "The spread of web-based applications, such as message boards and remote administrative tools, has resulted in an increase in the number of misconfigured and vulnerable web applications on the net," he says. Pair that with something as powerful as Google's index, and "you have a convenient attack vector for malicious users".

But it's not just administrators of bulletin boards who need to worry. In the US, the explosion of public documentson the web has led to many security holes: confidential files from the US Department of Homeland Security have been indexed, and people can even access electrical control systems. "One Google query, a couple of buttons and you can turn off power to someone's house," Mr Long says.

But there are some key differences between the US and UK. First, the UK government has been slow to move online, so less data is available. Secondly, the UK and Europe has rigorous data protection laws covering personal information, and companies are reluctant to make documents available that contain data which can identify someone directly. Even so, make sure that there's nothing to worry about. One way to start, if you value your privacy and bank balance, is to try a search for your phone number (if you're ex-directory, as an increasing number of people are) and for your credit card number, with and without spaces. Don't do the latter search in a public area, such as a wireless hot-spot or internet café; you'll be sending the number over an unencrypted link, which isn't wise.

If you find your phone number coming up when you don't want it to, and much more important your credit card number, then get in touch with the respective sites. In the case of the credit card, cancel it right away, and check your balance; if you could find the number you can be sure that somewhere out there is a hacker who has set a program running to churn through the potential valid numbers for a credit card against Google, and to follow any links to websites. Google does remove pages like this from its index, but only when told. Meanwhile, hackers will have grabbed them if they can.

"A malicious community of Google hackers has formed and a response has become necessary," Mr Long writes on his webpage.

If Brunner was alive, no doubt he'd be nodding his head in amused recognition. Here comes the shock wave. Now, try to ride it.

www.charlesarthur.com/blog

Suggested Topics
PROMOTED VIDEO
News
Susan Sarandon described David Bowie as
peopleSusan Sarandon reveals more on her David Bowie romance
Sport
Lewis Hamilton walks back to the pit lane with his Mercedes burning in the background
Formula 1
Arts and Entertainment
The new characters were announced yesterday at San Diego Comic Con
comic-con 2014
Sport
Arsenal supporters gather for a recent ‘fan party’ in New Jersey
football
Arts and Entertainment
No Devotion's Geoff Rickly and Stuart Richardson
musicReview: No Devotion, O2 Academy Islington, London
News
i100
Sport
sportDidier Drogba returns to Chelsea on one-year deal
Arts and Entertainment
The Secret Cinema performance of Back to the Future has been cancelled again
film
News
ebookA unique anthology of reporting and analysis of a crucial period of history
News
newsComedy club forced to apologise as maggots eating a dead pigeon fall out of air-conditioning
Life and Style
Balmain's autumn/winter 2014 campaign, shot by Mario Sorrenti and featuring Binx Walton, Cara Delevingne, Jourdan Dunn, Ysaunny Brito, Issa Lish and Kayla Scott
fashionHow Olivier Rousteing is revitalising the house of Balmain
News
i100
Arts and Entertainment
Christian Grey cradles Ana in the Fifty Shades of Grey film
filmFifty Shades of Grey trailer provokes moral outrage in US
News
people
Independent
Travel Shop
the manor
Up to 70% off luxury travel
on city breaks Find out more
santorini
Up to 70% off luxury travel
on chic beach resorts Find out more
sardina foodie
Up to 70% off luxury travel
on country retreats Find out more
Latest stories from i100
Have you tried new the Independent Digital Edition apps?
Independent Dating
and  

By clicking 'Search' you
are agreeing to our
Terms of Use.

iJobs Job Widget
iJobs General

BI Developer - Sheffield - £35,000 ~ £40,000 DOE

£35000 - £40000 per annum + competitive: Progressive Recruitment: My client is...

Employment Solicitor

Highly Competitive Salary: Austen Lloyd: MANCHESTER - Senior Employment Solici...

Senior Risk Manager - Banking - London - £650

£600 - £650 per day: Orgtel: Conduct Risk Liaison Manager - Banking - London -...

Commercial Litigation Associate

Highly Attractive Package: Austen Lloyd: CITY - COMMERCIAL LITIGATION - GLOBAL...

Day In a Page

Best comedians: How the professionals go about their funny business, from Sarah Millican to Marcus Brigstocke

Best comedians: How the professionals go about their funny business

For all those wanting to know how stand-ups keep standing, here are some of the best moments
Jokes on Hollywood: 'With comedy film audiences shrinking, it’s time to move on'

Jokes on Hollywood

With comedy film audiences shrinking, it’s time to move on
Edinburgh Fringe 2014: The comedy highlights, from Bridget Christie to Jack Dee

Edinburgh Fringe 2014

The comedy highlights, from Bridget Christie to Jack Dee
Evan Davis: The BBC’s wolf in sheep’s clothing to take over at Newsnight

The BBC’s wolf in sheep’s clothing

What will Evan Davis be like on Newsnight?
Finding the names for America’s shame: What happens to the immigrants crossing the US-Mexico border without documents who never make it past the Arizona desert?

Finding the names for America’s shame

The immigrants crossing the US-Mexico border without documents who never make it past the Arizona desert
Inside a church for Born Again Christians: Speaking to God in a Manchester multiplex

Inside a church for Born Again Christians

As Britain's Anglican church struggles to establish its modern identity, one branch of Christianity is booming
Rihanna, Kim Kardashian and me: How Olivier Rousteing is revitalising the house of Balmain

Olivier Rousteing is revitalising the house of Balmain

Parisian couturier Pierre Balmain made his name dressing the mid-century jet set. Today, Olivier Rousteing – heir to the house Pierre built – is celebrating their 21st-century equivalents. The result? Nothing short of Balmania
Cancer, cardiac arrest, HIV and homelessness - and he's only 39

Incredible survival story of David Tovey

Tovey went from cooking for the Queen to rifling through bins for his supper. His is a startling story of endurance against the odds – and of a social safety net failing at every turn
Backhanders, bribery and abuses of power have soared in China as economy surges

Bribery and abuses of power soar in China

The bribery is fuelled by the surge in China's economy but the rules of corruption are subtle and unspoken, finds Evan Osnos, as he learns the dark arts from a master
Commonwealth Games 2014: Highland terriers stole the show at the opening ceremony

Highland terriers steal the show at opening ceremony

Gillian Orr explores why a dog loved by film stars and presidents is finally having its day
German art world rocked as artists use renowned fat sculpture to distil schnapps

Brewing the fat from artwork angers widow of sculptor

Part of Joseph Beuys' 1982 sculpture 'Fettecke' used to distil schnapps
BBC's The Secret History of Our Streets reveals a fascinating window into Britain's past

BBC takes viewers back down memory lane

The Secret History of Our Streets, which returns with three films looking at Scottish streets, is the inverse of Benefits Street - delivering warmth instead of cynicism
Joe, film review: Nicolas Cage delivers an astonishing performance in low budget drama

Nicolas Cage shines in low-budget drama Joe

Cage plays an ex-con in David Gordon Green's independent drama, which has been adapted from a novel by Larry Brown
How to make your own gourmet ice lollies, granitas, slushy cocktails and frozen yoghurt

Make your own ice lollies and frozen yoghurt

Think outside the cool box for this summer's tempting frozen treats
Ford Fiesta is UK's most popular car of all-time, with sales topping 4.1 million since 1976

Fiesta is UK's most popular car of all-time

Sales have topped 4.1 million since 1976. To celebrate this milestone, four Independent writers recall their Fiestas with pride