Don't Google for “Google Bug Bounty”

stuartgunter.org

13 points·edent··8 comments

Err. Googleusercontent is owned by Google. It's used to host user content so that it's not under the Google domain and avoid XSS vulnerability.

For the author: https://www.namecheap.com/domains/whois/results.aspx?domain=...

The issue about that is that the official Google-written page is also under googleusercontent, which it really shouldn't be. Nothing about the article indicates the author doesn't know googleusercontent.com is Google's domain.

Second line in the article is "Although we’re not actually talking about Google’s Bug Bounty program… instead we’re talking about what appears to be an attempt to exploit people that are searching for it."

It also seems like he kind of rushed off to post the article without a response from Google "This issue was disclosed to Google, but seeing as it is in public search results I thought it best to publish this to make others aware of the issue. "

Kind of ironic that the about page claims he runs "a software engineering consultancy providing leading edge software and security expertise"

"This issue was disclosed to Google, but seeing as it is in public search results I thought it best to publish this to make others aware of the issue. Hopefully Google can remove the search result and investigate why it ranked above the genuine page."

I can imagine the reactions from the people at Google who received this issue...

clickbait

Care to elaborate? This very clearly seems like a malicious website topping the search results for their bug bounty program.

Actually, no, the author seems to genuinely think that you shouldn't trust googleusercontent.com as a scam website trying to pass for Google.

Reply on news.ycombinator.com