Go Back   Computer Forums > Welcome To Computer Forums .org > Social Lounge | Off Topic
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 07-04-2010, 02:49 PM   #11
Site Team
 
berry120's Avatar
 
Join Date: Jul 2009
Location: England, UK
Posts: 3,425
Default Re: What's happened to YouTube?

Regarding the actual flaw here:

Quote:
Several hours ago, someone found an HTML injection vulnerability in YouTube’s comment system, and since then sites such as 4chan have had a field day with popular videos. The bug is triggered by placing a <script> tag at the beginning of a post. The tag itself is escaped, but everything following it is cheerfully placed in the page as is.
This is a big, big hole on Google's part (perhaps it was there before they took over) - an XSS flaw to the extreme. I'm really shocked no-one found it sooner. Heck, even the stuff I write for internal use in companies is more secure than that on the XSS front (though obviously I'm not going to go into details here!)

Typical 4chan as well though - find an easy bug and pretend we all own the internet by behaving like mindless script kiddies.

On the plus side, getting a patch out for this in 2 hours is an unbelievably quick turnaround - Google have done VERY well on that front. With a certain other major software development company I can imagine the fix would have taken weeks... My only concern is that if the patch has been rushed through are there still other XSS exploits out there? I'd expect Google to be thoroughly investigating this though, so hopefully we won't see a repeat any time soon.
__________________

__________________
Save the whales, feed the hungry, free the mallocs.
berry120 is offline   Reply With Quote
Old 07-04-2010, 04:12 PM   #12
Fully Optimized
 
eslfish's Avatar
 
Join Date: Sep 2008
Posts: 1,604
Send a message via AIM to eslfish Send a message via MSN to eslfish Send a message via Yahoo to eslfish
Default Re: What's happened to YouTube?

Finally! Let em hack YouTube back to when Google hadn't bought it out!!!!
__________________

__________________
XFIRE: Lindmando STEAM: Lindmando
Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz (2 CPUs), ~3.0GHz
4094MB RAM 500 GB HD ATI Radeon™ HD 5850 8800 GT
Windows 7 64-bit Ultimate
eslfish is offline   Reply With Quote
Old 07-04-2010, 04:15 PM   #13
Site Team
 
berry120's Avatar
 
Join Date: Jul 2009
Location: England, UK
Posts: 3,425
Default Re: What's happened to YouTube?

Quote:
Finally! Let em hack YouTube back to when Google hadn't bought it out!!!!
OT yes, but:

a) This exploit won't let you "hack" an entire site back in time. It just let you insert javascript onto an individual page.
b) what's so bad since Google bought it out? It's now much better IMO.
__________________
Save the whales, feed the hungry, free the mallocs.
berry120 is offline   Reply With Quote
Old 07-04-2010, 08:28 PM   #14
Bogan
 
Neodude112320's Avatar
 
Join Date: Feb 2006
Location: Australia
Posts: 8,471
Send a message via MSN to Neodude112320
Default Re: What's happened to YouTube?

Quote:
Originally Posted by j03 View Post
Ebaums/4Chan

WHITE NIGHT WHITE NIGHT WHITE NIGHT WHITE NIGHT WHITE NIGHT WHITE NIGHT WHITE NIGHT WHITE NIGHT WHITE NIGHT WHITE NIGHT WHITE NIGHT
__________________
Desktop:BitFenix Survivor~Gigabyte GA-P67A-UD3R~ i7 2600K @ 4hz~AMD 6870 1GB~12gb Team Elite DDR3 1333~3xWD In RAID5~W7 Ult
Laptop:Alienware M11x~ i7-2637M 1.7GHz~16GB 1333MHz DDR3~GeForce GT 540M~W7 Ult
Neodude112320 is offline   Reply With Quote
Old 07-04-2010, 08:31 PM   #15
Golden Master
 
01001010's Avatar
 
Join Date: Oct 2005
Posts: 7,888
Default Re: What's happened to YouTube?

Quote:
Originally Posted by berry120 View Post
b) what's so bad since Google bought it out? It's now much better IMO.
Yeah, I agree. People should stop whining.
__________________
Stop the genocide now.
↳ www.savedarfur.org

Send comments, suggestions and criticisms.
↳ 01001010listens@gmail.com
01001010 is offline   Reply With Quote
Old 07-04-2010, 08:53 PM   #16
Fully Optimized
 
Nik00117's Avatar
 
Join Date: May 2005
Posts: 4,025
Send a message via AIM to Nik00117 Send a message via MSN to Nik00117 Send a message via Yahoo to Nik00117
Default Re: What's happened to YouTube?

YOutube is prob million of lines of code...

They made a mistake not a biggie. The site itself is still fine.
__________________
Main Rig: I7 920 CPU, 6 Gigs ram 5870 GPU
M17X Laptop 2.8 Ghz Dual Core, 4870 Radeon
Nik00117 is offline   Reply With Quote
Old 07-05-2010, 10:22 AM   #17
Daemon Poster
 
MetalOverlord76's Avatar
 
Join Date: May 2009
Posts: 1,012
Default Re: What's happened to YouTube?

I am suddeny finding great pleasure in those pictures
__________________
Do not trifle with dragons, for you are small and crunchy and taste good with ketchup
MetalOverlord76 is offline   Reply With Quote
Old 07-05-2010, 05:42 PM   #18
Site Team
 
berry120's Avatar
 
Join Date: Jul 2009
Location: England, UK
Posts: 3,425
Default Re: What's happened to YouTube?

Quote:
YOutube is prob million of lines of code...
I doubt it's that much - and so what if it is? Lines of code says nothing about the quality of a site...
__________________

__________________
Save the whales, feed the hungry, free the mallocs.
berry120 is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 05:15 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0