Youtube attack

CrazyRabbit

It seems Youtube is currently under attack from the script kiddies again. Trying to view user comments results in the browser redirecting to other web pages or the browser behaving oddly.

It's caused by a small script that is left as a comment on videos. When users try to view the comments, the script executes and does whatever the attacker wants via HTML code.

So far I've see the word 'LOL' appear all over the browser screen, redirections to lolcat pics or random websites. But, I've also been redirected to gay porn, and a Goatse pic. And there is the possibility of being directed to websites with malicious code etc.

Some child may view some video of Ben10 or something, and they get directed to porn. Or even worse, people get directed to child porn or something else that is illegal!

Now I hope the people responsible for this get caught, but I'm wondering about what level of punishment should they get?
On one hand, they probably just used them script themselves to redirect to some funny pics, or make amusing things happen in the browser etc. But now that this code has been leaked, it's being used much more maliciously, with inappropriate stuff cropping up all over the place.

What do you think the punishment should be?

W.Shakes-Beer

They should be caught, bet with a golf club, and the video of their beating put on YouTube.

R0ot

Protect your browser more and stop searching for "nude girls"

christ on a bike!

Not working for me, is it with any video?

mikemac

Not that you should looking at youtube at work but if you redirected to some dodgy porn site and it got logged, well people has lost their jobs over less.

I was a member of Betdaq, similar to Betfair and it got shut down by a similar attack.
With bets being matched and money at stake it could ruin you.
Not me with my small stakes but there are millions being matched every day, every hour even.

Jail sentences for the feckers I say.
Messing with a companies website is no different to walking up and vandalizing a shop or business.

CrazyRabbit

christ on a bike! wrote: »

Not working for me, is it with any video?

No, random videos. Basically, someone has to leave a comment with the script code in it.

Most of the popular channels/videos are affected.

I just checked again and it looks like Youtube have started removing the offending script from comments, or fixed the security vulnerability.

My name is URL

YouTube's fault that the vulnerability exists really

rockmongrel

I love this sort of stuff, nothing better than a bit of madness on the internet, means things are still free.

Flojo

4chan once again... :rolleyes:

Myrddin

CrazyRabbit wrote: »

I've also been redirected to gay porn

Pfft..."redirected"

The script opens random pages from your browsing history :pac:

My name is URL

Flojo wrote: »

4chan once again... :rolleyes:

According to comments on Google's support site for YouTube it was ebaumsworld that did it, and the comment that says that was 'thanked' over 9000 times... so yeah, more than likely 4chan :pac:

Flojo

My name is URL wrote: »

According to comments on Google's support site for YouTube it was ebaumsworld that did it, and the comment that says that was 'thanked' over 9000 times... so yeah, more than likely 4chan :pac:

LOL! Can't wait to get my posts over 9000.. that shall be a good day!

Squarewave

Y2K!

What do you think the punishment should be?

I doubt they'll ever be caught; there could be a few thousand people involved in posting the codes.
Anyway, there are worst criminals out there in my opinion..

Elliemental

I've spent most of the afternoon playing old Oasis videos on YouTube, and I can't say that I have noticed anything unusual. I hope I haven't downloaded a heap of trojans onto my lappy now:mad:

Cinful

YouTube attack? Saturday night event? The bar is closing. The boys start coming with desperate one-liners.

John Lynch Ph.D

CrazyRabbit wrote: »

So far I've see the word 'LOL' appear all over the browser screen, redirections to lolcat pics or random websites. But, I've also been redirected to gay porn, and a Goatse pic. And there is the possibility of being directed to websites with malicious code etc.

Some child may view some video of Ben10 or something, and they get directed to porn. Or even worse, people get directed to child porn or something else that is illegal!

Haha, it's funny - I like the way you try make it out to be a serious crime with your 'think of the children attitude'

IvySlayer

Youtube is a good site, why would any want to 'attack' it.

4chan sound like a bunch of losers with nothing else to do and enjoy causing nuisance.

laugh

IvySlayer wrote: »

4chan sound like a bunch of losers with nothing else to do and enjoy causing nuisance.

boxxy is our queen.

Herb Powell

laugh wrote: »

boxxy is our queen.

no Tabby nao 4 newfags

Yakult

Tis 4chan alright. They always do it. Good laugh reading about it.

Seems to be Justin Bieber they are targeting.. No harm done.

Elliemental

That Goatse picture is so old now, anyway! I suppose Tub Girl is on there somewhere, too.:rolleyes:

CrazyRabbit

John Lynch Ph.D wrote: »

Haha, it's funny - I like the way you try make it out to be a serious crime with your 'think of the children attitude'

You think showing porn to kids isn't serious???

Yakult

CrazyRabbit wrote: »

You think showing porn to kids isn't serious???

They have to learn sometime!

shofukan

feelingstressed wrote: »

Not that you should looking at youtube at work but if you redirected to some dodgy porn site and it got logged, well people has lost their jobs over less.

I was a member of Betdaq, similar to Betfair and it got shut down by a similar attack.
With bets being matched and money at stake it could ruin you.
Not me with my small stakes but there are millions being matched every day, every hour even.

Jail sentences for the feckers I say.
Messing with a companies website is no different to walking up and vandalizing a shop or business.

That's funny, I actually know the lad in charge of Betdaq's servers and wasn't he only telling me how 'bulletproof' they were!

Mike 1972

TBH Youtube should just do away with comments. They seem to be more trouble than theyre worth

MultiUmm

No doubt it was the '/b/tards' from 4chan. :rolleyes:

Those guys are even disliked by the other boards over there. :rolleyes: