Search Engine Hacking: The Newest Cybersecurity Threat

This webinar discusses Search Engine Hacking, also known as Google Dorking ― an underestimated and lesser-known technique employed by hackers, cyberstalkers and cybercriminals. This method leverages specialized search engine queries to expose sensitive data that has been unintentionally and unknowingly made public. While innocuous when utilized by researchers, journalists or curious users, Search Engine Hacking becomes perilous in the hands of malicious actors, underpinning various notorious cybercrimes of all kinds including sextortion, attacks on critical infrastructure, CIA compromises and targeted intrusions affecting individuals ranging from legal officials to celebrities that may even result in homicide.

Despite its potential for harm, the legality of Google Dorking remains inadequately addressed within existing legal frameworks, exemplified by the vague and overbroad Computer Fraud and Abuse Act and protections in place for search engines such as the DMCA and CDA 230. This obscurity raises due process concerns, posing threats to the rights of citizens, white hat hackers and journalists. This presentation underscores the imperative to align legislation with contemporary cyber threats and understanding of the technicalities of these attacks, to advocate for reform toward a just and equitable legal landscape that safeguards privacy and victims, upholds due process, and empowers hacktivists, journalists and online users alike. 

About our speaker: Star Kashman ’20 is a legal scholar with a passion for creating a positive impact through law and technology. In the Washington Journal of Law, Technology & Arts, she published the first legal academic article on the intersection of law and an underestimated cyber technique called Search Engine Hacking (Google Dorking). She expanded on her publication in Law360 with her article "Search Engine Hacking Needs a Legislative Fix". In this highly specialized field, Kashman serves as the leading expert on this vital gap within cybersecurity law. She uses her research, speaking engagements and events to promote awareness and sensible regulation. The Office of the Director of National Intelligence is acknowledging her exceptional contributions to cybersecurity and national security law by presenting her with a research award this year. During her time as a student, Kashman led a group of Brooklyn Law School Incubator & Policy Clinic students to host the first event addressing Search Engine Hacking, hosting influential figures from the legal, cybersecurity and national security spheres, including Mark Rosen, Jonathan Askin, Carrie Goldberg and the OwlSec founders. Kashman continues to educate on critical cybersecurity concerns facing legal professionals at academic and professional events including NYCLE's first mandatory CLE event for cybersecurity. Her work has generated significant interest, leading to numerous upcoming speaking engagements where she continues to educate and protect the public from these ongoing and lesser-known cybersecurity concerns.