Post
Topic
Board Service Discussion
Re: Dumb Question : If I found a security flaw with a major bitcoin company ..
by
Nicolai
on 28/03/2013, 21:21:53 UTC
On the screenshot we can see that you just searched for "site:instawallet.org", this is something that has been known for ages (e.g. https://plus.google.com/114827336297709201563/posts/TQNiDpqtwxT). Aka "Google hacking", "google dork", whatever it has nothing to do with hacking.

But simply asking google not to index or list items on your website, doesn't "fix" it because it has never been a security problem in instawallet. As I said before, it is best practice to do what you helped them with, but not a security problem to not do it. You want it to be a security problem to make instawallet look bad for not paying you, but please just face that it isn't and will never be a security problem.

Changing the "site" command to e.g. "allintext" and volá free bitcoins:
https://instawallet.org/w/xoZ1YqOtD6ycsyk1DaiNelUAbOhagbT0g
http://i.imgur.com/aDx3rfO.png

But no, I'm not blaming instawallet.