Slashdot Mirror

← Back to Stories (view on slashdot.org)

Yahoo! XSS Flaw Endangers its Users

Posted by CowboyNeal on from the ever-vigilant dept.

Rarely Greys writes "A major Yahoo XSS flaw makes it possible to take over any Yahoo user's account, including their mail, instant messaging, photos, etc. This is not a rare occurrence. So why aren't web sites doing more to protect their users? It's looking like most web developers don't even know or care about XSS."

3 of 157 comments (clear)

  1. Re:Talk about an exploit... by superash · · Score: 3, Funny

    Don't act dumb. It is no longer cute.

  2. XSS? by bar-agent · · Score: 2, Funny

    What's XSS?

    Eh, never mind. I don't really care.

    --
    i'd hit it so hard, if you pulled me out you'd be the king of britain [bash.org]
  3. Re:Responsible disclosue? by Simon+Garlick · · Score: 2, Funny

    You seem to have forgotten that this is Slashdot. Let me break it down for you.

    Google = GOOD
    Yahoo = BAD

    You're welcome.

    --

    -----
    PGP Key ID 0xCB8FF658