Hackers Reveal Exploit Flaws in MSN Live

I just came across this article in an Internet marketing newsletter I receive.

How to remove your competitors from MSN Live!

 

wow too many details to comprehend at once.

 

WOW...that sounds way to easy to do, i hope they fix that soon.

 

I am a victim of this !! damn it . i have emailed them but no reply .

 

I think it has happened to a site of mine too! It was a top ranker in MSN for some popular keywords, it has now dropped out of their index completely. I do recall seeing hundreds of those strange url's in my server logs, like mydomain.com/?file=cars, about 6 weeks ago and was a bit confused by it but I didn't really think it was the cause of the de-indexing. Now I'm convinced that it is.

Has anyone got a fix for this? I tried changing the htaccess file as explained on the boogybonbon site but only got a server error after doing so.

 

It has nothing to do with hacking. Its how msn deals with duplicate content.

 

Wow...I have installed it yesterday...

BTW I dont like that I cannot see first the list of connected people....or there is a way to do it?

 

This is really strange by MSN algo. And yes, I agree with amnezia, this is not a hack.

 

erm you installed what?

 

Probably the script which is on the link to prevent being "attacked".

 

I've seen this post before.

The script he offers as a solution, while a valid solution, has two caveats:

It's a form of cloaking (which I could care less, just letting you know)

Could possibly interfere with scripts you have already running.. Depends on what $_GET/$_POST (if any) your scripts use..

Just letting y'all know.

A

 

thanks for sharing xtreme. I was wondering if MSN live ever get any better than Google. Google still the best IMO.

 

Yep, I was wondering why I dropped out of MSN serps; checked and dupe content pages show up for sure. While Google and Yahoo account for most of my traffic, I'm still losing about $30 a day because of this. I hope MSN fixes it soon.

-RonMo

 

you can fix it your self you know. Just top showing status 200 codes for pages that don't exist.

 

301 redirects are not cloaking

 

Wow... this is really wow... now I know why all of the sudden my site ranking well lose from the ranking

 

wow.... my site will now be saved...

 

A solution:

http://www.webmasterworld.com/apache/3174971.htm

 

OK, I see the codes posted at webmasterworld.. Kind of confusing to me. Can anyone please post the proper .htaccess code here for those of us that are "technically challenged"?

Thanks, RonMo

 

Wouldn't the above hack only work if the competitor can actually post these _GET urls on your site. If they are unable to post the urls on your site then the hack will not really work.

Is this true?