This is all good, but unlss @realDonaldTrump unblocked I will never use Twitter again. I don't care if you agree or disagree with what was said. But if even a pressident of united states can be banned, best not use such platforms. Period!
I agree WHOIS is completely useless! Anyone can fake this info anyway and anyone using there real info can be SWATTED (https://en.wikipedia.org/wiki/Swatting)
I've been windows power user for many years before I switched to Linux. I can say that WinXP was one of the best windows and Win7 was okay and usable. Win8 and Win10 complete shit. Everyone I know had issues with it and had hard times using it. Asking if it was possible to use at least Win7 again. Windows completely screwed up there UI thinking it would be easier for people to use and in process completely killing windows. Not to mantion Win8/10 security/privacy horror storries. The last usable windows was Win7. This is why I see many people switching to Mac OS X or Linux.
I highly dought that. Most users use Windows and don't even have Anti-Virus/Firewall installed on there computers. Networking hardware is set to defualts. I would argue more computers and servers are unprotected because we have more computers and users online.
I'm not suprised at all that Google rewarded this low. This is why they are always be more blackhat SEO then reporters. Because companies are too cheap to realize how valuable this discoveries are. They are getting too greedy. I agree 100% that this should of been at least $1,000,000 if not much more. If this contenues google could be the next Facebook ^_^ Lets use DuckDuckGo instead everyone ;-)
@TomAnthony, This is f*up, google should of given you at least $1,337,000 bounty for this. This is one of the most profitable exploits I've seen discovered by anyone. Plus you've done the right thing and reported it. Good job on this discovery!
"I have a couple of other ideas for search related attacks, but am not sure I'm going to explore them any longer."
You're valuing yourself way too low. You've done a good job with this and should receive more bounty for it. Also see if you can earn more for doing research else where; https://www.bugcrowd.com/bug-bounty-list/ Also maybe use something like; https://www.hackerone.com/