Youtube hacked

[Anubis1980]

Youtube got hacked and many video titles are changed.You can read more on /youtubegothacked(DOT)wordpress(DOT)com .

Xss site scripting method..Really cool and viral..

 

[bugsniper]

The real hacker is most likely DudeTubeHacker, he made an attack list long time ago, and followed it as planned.

Someone also made the youtube account "saadzim", trying to take adventage of the situation, and pretend to be the hacker, commenting "haha I hacked you" in various videos (Some people will probably ask him how he has done that, and he'll answer them that if they will give him their passwords they will know...)

No accounts were hacked, only the titles. About 2K video titles were hacked, probably the hacker abused a bug in the HTML script, I have no real idea, maybe you do.

Maybe this hacking operation will get him a job in a High Tech company, who knows.
It took youtube 3 hours to take control of the situation. The next attack will probably come soon..

Sorry for digging I am just bored.

 

[Anubis1980]

lol dude...
Migueltarga and saadzim found this security hole and its made by a php script.. Link to script its posted on this wordpress blog on first post.Also the list of the victims..

 

[robertpaultech]

really shocked to hear this.

 

[accelerator_dd]

XSS is CrossSiteScripting and it's a client side attack. It's not server based so the titles have been changed by infected users rather then the hacker.

 

[menzow]

XSS is CrossSiteScripting and it's a client side attack. It's not server based so the titles have been changed by infected users rather then the hacker.

Thats indeed correct,
But hey, whats the difference? If you change a website's appearing to everyone who is using the website, and has javascript enabled, its like hacking the website serverside right?

You can even get logins etc, by making a small iframe, and using a cookie hijacking trick.

Or just redirect all the users to another site.. etc.


Seriously, XSS has became really hot lately, and its indeed one of the easiest way to exploit a famous website.

 

[sahilsxy29]

I agree. a gr8 hacker
last tym they did xss on orkut
changed the comm owners
and recently "Bom Sabado" day b4 yesterday or b4 tht

 

[sakkid]

I thought BIG G had the best programmers on the planet! Google should just hire this guy..... Or have they?

 

[bannedfree]

LoL this is not about hacking man. Anubis1980 just wants to gain traffic to wards his site.

Notice his first post he is telling about YT got hacked and refers to a site.WP for more details of the story which happens to be obviously a blog. Since its a .wp.com

2nd thing is that he then mentioned about scripting method and viral stuff like that.

But i give a good credit to Anubis though for thinking a good topic for someone to be interested in and visit his blog. Good thinking man. nice move.

 

[kingpin123]

yes orkut was screwed the day before yesterday

 

[pruss25]

LoL this is not about hacking man. Anubis1980 just wants to gain traffic to wards his site.

......

But i give a good credit to Anubis though for thinking a good topic for someone to be interested in and visit his blog. Good thinking man. nice move.

Ha yeah that's what I thought when I read the first post.

Pretty good thinking though.

 

[accelerator_dd]

Iframing some affiliate for entertainment (since it has sick coversions) when used with videos would make them millions!!!

And google doesn't have the best hackers in the world. I know one of them (talked to him 2 times) and he is teaching people for free (not noobs but ppl that want to learn). He doesn't have a high paying IT job. He does it because he loves it, not for the money. Google has the money hackers that will never be good at it.

Google "Adrian Lamo" to get the insignt of how a real hacker thinks if you're interested.

 

[Anubis1980]