Slashdot Mirror
Details of the LiveJournal Account Hacks
An anonymous reader writes "Brian Krebs of the Washington Post has written about the recent spate of
hijackings at Six Apart's popular LiveJournal service. Hundreds of journals have now been taken over by a
notorious group called 'Bantown' using a series of complicated cross-site-scripting vulnerabilities. Krebs details the recent security changes made by LiveJournal in response to the takeovers." From the article: "It is unclear whether LiveJournal has managed to close the security holes that the hackers claim to have used. The company says it has, but the hackers insist there are still at least 16 other similar JavaScript flaws on the LiveJournal site that could be used conduct the same attack. [Bantown] group members said they plan to turn their attention to looking for similar flaws at another large social-networking site. "
In other news, another group of hackers sometines called "the FBI" used a known exploit, sometimes called "the Warrant" to copy records from mnay major search engines.
- Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
I've been noticing LiveJournal is really slow and it hangs a lot lately.
Are you a paid user? Paid users end up in a higher priority queue, so they get their pages a lot faster. For example, I just loaded my friends page, and this is in the comments near the top of the page:
LiveJournal ExpressLane: You received this page before 4 free users, saving approximately 1 seconds!