LJ virus?

Jun. 12th, 2004 01:17 pm
cmdr_zoom: (oops)
[personal profile] cmdr_zoom
Okay, folks. If you see an entry in your friends' journal that says
"this is very interesting."
DO NOT CLICK ON IT.

Clicking the link will take you to a URL which will put the same thing in your journal. It might be harmless, but anything that looks as viral as this worries me. There's also a strong possibility that it might grab your LJ password. So, I suggest you don't do it (especially now that I've done you the favor of satisfying your curiousity as to what the link is). And if you already have, for safety's sake change your LJ password ASAP.

(no subject)

Date: 2004-06-12 01:42 pm (UTC)
From: [identity profile] indiecowboy.livejournal.com
I'm worried about it too...since I clicked it! One of my friends says that they're pretty sure you can't get your password stolen...don't ask me how they know. They may be filled with uber geekness?

(no subject)

Date: 2004-06-12 07:53 pm (UTC)
From: [identity profile] zonereyrie.livejournal.com
It is harmless, I just looked at it.

It is a trivial little trick. Basically they replicate a LJ update form and trigger it with JavaScript. So your browser calls LJ to post to your journal - if you're logged in you have a valid cookie, so LJ accepts the post.

Nothing at all ever goes back to the other site.

I could do the same thing, it is fairly simple JavsScript code.

(no subject)

Date: 2004-06-13 12:20 am (UTC)
From: [identity profile] cmdr-zoom.livejournal.com
Okay. Thanks for the investigation.

(Hey, new comment-reply form.)

Profile

cmdr_zoom: (Default)
Kelly St. Clair

July 2025

S M T W T F S
  12345
6789101112
13141516171819
20 212223242526
2728293031  

Style Credit

Expand Cut Tags

No cut tags