How to break YouTube - The Drunken stepFORUM - A place to discuss your worthless opinions

#1 07-04-2010, 10:51 AM

from /b/

Enter this code into a youtube video comment. It keeps others from commenting and from viewing others' comments.

Code:

Content, Pictures  and Download links visible to registered users only. 

REGISTER NOW to access all areas that are invisible to non-members.

Most all Justin Bieber videos have been done already. Find another target.

maxbailey · #2 07-04-2010, 11:30 AM

Code:

Content, Pictures  and Download links visible to registered users only. 

REGISTER NOW to access all areas that are invisible to non-members.

I tried that, it just kepy saying 'Error, try again'.

#3 07-04-2010, 11:33 AM

Code:

Content, Pictures  and Download links visible to registered users only. 

REGISTER NOW to access all areas that are invisible to non-members.

Shit they may have already patched it to not work. I havent tried it but i was in a thread where ppl were doing it with success so it did work at one time.

maxbailey · #4 07-04-2010, 11:38 AM

Code:

Content, Pictures  and Download links visible to registered users only. 

REGISTER NOW to access all areas that are invisible to non-members.

Just found this too...

Code:

Content, Pictures  and Download links visible to registered users only. 

REGISTER NOW to access all areas that are invisible to non-members.

MrGoutHimself · #5 07-04-2010, 01:08 PM

LMAO, 4Chan attacking YouTube and Justin Bieber. Classic.

Not at the table, Carlos.

#6 07-04-2010, 01:34 PM

Code:

Content, Pictures  and Download links visible to registered users only. 

REGISTER NOW to access all areas that are invisible to non-members.

Bwahahaha.... i like this comment

ANON 1: ...The script is patched for now.
ANON 2: He scared

MrGoutHimself · #7 07-04-2010, 03:44 PM

Code:

Content, Pictures  and Download links visible to registered users only. 

REGISTER NOW to access all areas that are invisible to non-members.

That is funny, especially since we know NOTHING is sacred for the /b/tards.

#8 07-05-2010, 11:55 AM

Google acts to fix YouTube flaw exploited by hackers

YouTube has been forced to fix a flaw allowing hackers to bombard users
with fake pop-up messages and redirect them to adult sites.

Hackers placed code in the comments section, under targeted videos, that would run when people watched the clip.

In some cases, a pop-up screen appeared reporting that the Canadian singer, Justin Bieber, had died in a car crash.

Google, which owns YouTube, said that it had fixed the problem "about two hours" after it was discovered.

"We took swift action to fix a cross-site scripting (XSS) vulnerability on youtube.com," a spokesperson said.

"Comments were temporarily hidden by default within an hour, and we released a complete fix for the issue in about two hours.
Nasty attacks

Cross-site scripting (XSS) vulnerabilities are relatively simple attacks that allow hackers to place code into web pages.

In the YouTube incident, hackers used JavaScript code and HTML, both commonly used on web pages.

Security experts said that although in most cases the code was relatively benign, it has been used for more malicious purposes.

"The thing with a cross-site scripting attack is that it will appear that it is a message being posted by that website, which gives it a certain legitimacy, Graham Cluley of security firm Sophos told BBC News.

"It could be used to show a message that tells you to update your password; it could link to a malicious website; or it could attempt to phish you."

Phishing is a common tactic used by cybercriminals and involves using fake websites to lure people into revealing details such as bank accounts or login names.

"I've seen nasty XSS attacks that are used to fake whole login screens and we know how many people use same passwords for multiple accounts," said Bojan Zdrnja of the Internet Storm Centre in a blog post.

Mr Cluley said that responsibility for these kinds of vulnerabilites was down down to how securely a website was written.

"Web programmers need to be much more careful with their code."

Google said it was "continuing to study the vulnerability to help prevent similar issues in the future".

When the vulnerability was first reported, rumours suggested that YouTube was infected with a virus.

Code:

Content, Pictures  and Download links visible to registered users only. 

REGISTER NOW to access all areas that are invisible to non-members.