What happened to the Messenger Plus! forums on msghelp.net?
Shoutbox » MsgHelp Archive » Skype & Technology » Tech Talk » youtube under heavy raid

1 votes - 1 average   youtube under heavy raid
Author: Message:
Chrissy
Senior Member
****

Avatar

Posts: 850
Reputation: 5
29 / Male / Flag
Joined: Nov 2009
O.P. youtube under heavy raid
STAY AWAY FROM YOUTUBE. Exploits have been taken further to now steal account details.
I HIGHLY recommend staying away from youtube for the time being. The exploit involves javascript which can be used to give your computer a shit time via browser exploits (this applies for all browsers). Watch youtube videos at your own risk.


Anyone can inject code to youtube videos :P

http://www.facepunch.com/showthread.php?p=23100690

And of course 4chan is involved as always

http://boards.4chan.org/v/res/65521163 :P
07-04-2010 01:57 PM
Profile E-Mail PM Web Find Quote Report
Chris4
Elite Member
*****

Avatar

Posts: 4461
Reputation: 84
32 / Male / Flag
Joined: Dec 2004
RE: youtube under heavy raid
And now it's been fixed.
Twitter: @ChrisLozeau
07-04-2010 02:02 PM
Profile PM Find Quote Report
andrey
elite shoutboxer
****

Avatar

Posts: 795
Reputation: 48
– / Male / Flag
Joined: Aug 2004
RE: youtube under heavy raid
quote:
Originally posted by Chris4
And now it's been fixed.
No it hasn't. All they did is hide the comments by default. (which is the part where the code injection can happen)

This is a suprisingly huge fuckup. :zippy:

Cookies can be stolen, houses burnt and lives threatened.

* andrey puts youtube on his block list for the next few days..

This post was edited on 07-04-2010 at 02:06 PM by andrey.
[Image: w2kzw8qp-sq2_dz_b_xmas.png]
07-04-2010 02:05 PM
Profile PM Find Quote Report
Chris4
Elite Member
*****

Avatar

Posts: 4461
Reputation: 84
32 / Male / Flag
Joined: Dec 2004
RE: youtube under heavy raid
quote:
Originally posted by andrey
All they did is hide the comments by default.
That's correct.. so none of the JavaScript pop-ups, disabled report buttons, text and images across the screen, website redirects, cookie grabbers, etc. now occur and therefore temporarily "fixed". They just have to delete the offending comments now, then re-enable comments.
Twitter: @ChrisLozeau
07-04-2010 02:15 PM
Profile PM Find Quote Report
andrey
elite shoutboxer
****

Avatar

Posts: 795
Reputation: 48
– / Male / Flag
Joined: Aug 2004
RE: youtube under heavy raid
quote:
Originally posted by Chris4
quote:
Originally posted by andrey
All they did is hide the comments by default.
That's correct.. so none of the JavaScript pop-ups, disabled report buttons, text and images across the screen, website redirects, cookie grabbers, etc. now occur and therefore temporarily "fixed". They just have to delete the offending comments now, then re-enable comments.
That's not what I'd consider a 'fix'. Fix would be to disable posting/display of comments completely for the time being, get their input validation fixed and delete the comments that abused the flaw.
Currently, all the JavaScript pop-ups, disabled report buttons, text and images across the screen, website redirects, cookie grabbers, etc. still work once you press the "show comments" link.

This post was edited on 07-04-2010 at 02:25 PM by andrey.
[Image: w2kzw8qp-sq2_dz_b_xmas.png]
07-04-2010 02:20 PM
Profile PM Find Quote Report
Chris4
Elite Member
*****

Avatar

Posts: 4461
Reputation: 84
32 / Male / Flag
Joined: Dec 2004
RE: youtube under heavy raid
quote:
Originally posted by andrey
Currently, all the JavaScript pop-ups, disabled report buttons, text and images across the screen, website redirects, cookie grabbers, etc. still work once you press the "show comments" link.
Ah right, wasn't aware of that. In that case they should definitely disable comments for now until they're removed.
Twitter: @ChrisLozeau
07-04-2010 02:22 PM
Profile PM Find Quote Report
Chrissy
Senior Member
****

Avatar

Posts: 850
Reputation: 5
29 / Male / Flag
Joined: Nov 2009
O.P. RE: youtube under heavy raid
Anything posted is still up, but youtube has blocked all further posts..
07-04-2010 02:23 PM
Profile E-Mail PM Web Find Quote Report
whiz
Senior Member
****


Posts: 568
Reputation: 8
– / – / Flag
Joined: Nov 2008
RE: youtube under heavy raid
Looks like they've removed the safety mode, now.  Has it all been fixed?
07-05-2010 08:37 AM
Profile E-Mail PM Find Quote Report
Chrissy
Senior Member
****

Avatar

Posts: 850
Reputation: 5
29 / Male / Flag
Joined: Nov 2009
O.P. RE: youtube under heavy raid
quote:
Originally posted by whiz
Looks like they've removed the safety mode, now.  Has it all been fixed?
Yeah :P
07-05-2010 11:50 AM
Profile E-Mail PM Web Find Quote Report
« Next Oldest Return to Top Next Newest »


Threaded Mode | Linear Mode
View a Printable Version
Send this Thread to a Friend
Subscribe | Add to Favorites
Rate This Thread:

Forum Jump:

Forum Rules:
You cannot post new threads
You cannot post replies
You cannot post attachments
You can edit your posts
HTML is Off
myCode is On
Smilies are On
[img] Code is On