11–20 of 24 posts
Nothing particularly interesting seems to have actually happened. Some posts got onto the Dashboard, which was still running. In fact, everything was still working just fine. Script kiddies found a small crack and went for it.
The exploit uses a "data-uri script tag" in the video embed field. In other words, it runs some sort of script through the section of the site that's supposed to only allow video embed codes from sites like YouTube and Vimeo. A pretty serious security hole.
Keeping an eye on this. The post in question looks like this: https://dl.dropbox.com/u/58607934/Screen%20Shot%202012-12-03... It has nailed a number of major accounts, including The Verge, USA Today, Reuters and The Daily Dot. Buzzfeed has tips on how to keep safe: http://www.buzzfeed.com/ryanhatesthis/hacker-group-exploits-... Update: The GNAA says that the hack was part of an anti-blogging campaign. > This was just…
If you suspect a site has been compromised, wouldn't a better approach be to submit this as a text article explaining your reasons rather than linking to the affected site? Depending on the nature of the hack, the title could easily have been: Was Tumblr hacked in order to do drive-by malware installs? (tumblr.com) Now everyone who clicks is potentially at risk.
TNW Article: http://thenextweb.com/insider/2012/12/03/a-worm-is-hijacking...
The exploit uses a "data-uri script tag" in the video embed field. In other words, it runs some sort of script through the section of the site that's supposed to only allow video embed codes from sites like YouTube and Vimeo. A pretty serious security hole.
Mind sharing where you found this info? Did you figure it out yourself?
Nothing particularly interesting seems to have actually happened. Some posts got onto the Dashboard, which was still running. In fact, everything was still working just fine. Script kiddies found a small crack and went for it.
It's not really a script kiddie if it's an original exploit, and is still a vulnerability that has cost businesses money.
Also, whether or not it cost the business money has nothing to do with the quality of the break-in.
Tumblr engineers have resolved the issue of the viral post attack that affected a few thousand Tumblr blogs. Thanks for your patience.
If you suspect a site has been compromised, wouldn't a better approach be to submit this as a text article explaining your reasons rather than linking to the affected site? Depending on the nature of the hack, the title could easily have been: Was Tumblr hacked in order to do drive-by malware installs? (tumblr.com) Now everyone who clicks is potentially at risk.
Earlier quoted context omitted.
It's not really a script kiddie if it's an original exploit, and is still a vulnerability that has cost businesses money.
What is your source for that info? Also, whether or not it cost the business money has nothing to do with the quality of the break-in.
The things that matter during an attack: how much damage was caused, what kind of data was compromised, and how much it will cost to get things fixed. The quality of the attack is only a factor when it comes to cost/benefit of fixing the vulnerability.