Stay away from youtube for the moment!

Akisohida

Title Not Found
Joined
Feb 8, 2008
Messages
404
It seems some 4chan script kiddies found something to do between playing their pokemon games and getting rides from their mommy to the mall while pretending to be bad arse hackers.

They found a script that, when posted in comments, can break the page showing that video. I am not quite sure what it does but I have been warned to NOT touch youtube for today and I am spreading the warning.

According to a friend 'Someone showed a screencap of one of them going to a Youtube link and Firefox blocked 70k pop-ups'
 
the comment section in youtoube doesn't allow scripts no php, html, or even bbcode so i doubt it.

and if your browser isn't rubbish it should block client side scripts it's self.
 
From what I have been told, it is a bug or exploit. I'd link to the 4chan post showing the script but it's...4chan. I have not been to youtube and I am not risking it. :)

By the way, I used 'script kiddy' as an insult, not as what they are. I consider a 'script kiddy' to be those idiots who think they can 'hack your modem and give you a virus, yo!' and other stupidly inaccurate things.
 
So I went on YouTube and posted a comment....


I declare this rumor to be made of FAIL.



Seriously, it's not even possible to happen.



/end
 
From what I have been told, it is a bug or exploit. I'd link to the 4chan post showing the script but it's...4chan. I have not been to youtube and I am not risking it. :)

By the way, I used 'script kiddy' as an insult, not as what they are. I consider a 'script kiddy' to be those idiots who think they can 'hack your modem and give you a virus, yo!' and other stupidly inaccurate things.

you dont have to define script kiddie iv been developing applications and web pages for years and came across hundreds if these idiots and even had 1 spam my e-mail for a week because he wanted me to make php script for him.
 
So I went on YouTube and posted a comment....


I declare this rumor to be made of FAIL.



Seriously, it's not even possible to happen.



/end

it would take a pretty stupid developer to allow any kinda script in comments.

why do you think that almost every forum uses parsing with bbcode or textile for post formatting rather than pure html.
 
^this


Also, pasting some form of JavaScript into the browsers would only affect the user who does it


The only way for them to possibly do this would be for this "kid" to gain access to YouTube/google, and then modify the php code
 
Ok. All I was doing is spreading the warning I got in case it was true.
 
Thank you for the head's up and I am glad to hear it was a false alarm. :)

I could see them trying to spread that rumor around themselves though to try to make people panic (seems their style).

Thank you to everyone for clarifying.
 
;1463509 said:
Should always do your research before dismissing something just because it doesn't seem likely. Turns out that this warning is valid and should be heeded.

http://www.google.com/support/forum/p/youtube/thread?tid=2059b45a2a699910&hl=en
http://news.slashdot.org/story/10/07/04/1530234/YouTube-Hit-By-HTML-Injection-Vulnerability

oh so it only just hides comments it is still lots of fail on google's part for allowing html to be injected in there pages crap it if was full html people could easily use the <?php ?> tag and pretty much do anything they want including killing the databases that the pages connects too since one line of php can make mysql drop the database
 
Akisohida is right stay away from youtube, my bro (KILL3R) started getting weird popups and now he cant play css lol
 
Yea, im sure this cant happen, but thanks for the warning anyway.
 
Thank goodness that the hackers don't care about cute videos of huskies and Wolf/malamute hybrids.
 
Last edited:
I've been watching NintendoCapriSun's Banjo-Tooie LP's fpr most of the day, so far no problem. I'll stay away from the rest of the labyrinth that is youtube for now, thanks for the info.
 
Back
Top