?

Log in

No account? Create an account
WARNING - The Fucking Bluebird of Goddamn Happiness [entries|archive|friends|userinfo]
Zoethe

[ userinfo | livejournal userinfo ]
[ archive | journal archive ]

WARNING [Jun. 12th, 2004|09:39 am]
Zoethe
[Current Mood |angryangry]

There is a data miner sneaking around livejournal. It you see an entry that reads simply "this is interesting" DO NOT CLICK ON IT. It will exploit a hold in lj to put itself on your page, apparently by using cookies in some ysterious way I don't quite comprehend, being only front-end capable in computers. While lj promises that it isn't really getting your information, I am not that trusting in these matters.

If you have clicked on it in anyone's journal, go and change your password immediately, then log out and log in again. And delete your cookies. I got boned by this when it appeared on Ferrett's journal, and I hope the lj people track down this bastard and remove his genitals with a rusty spoon.
LinkReply

Comments:
From: erisreg
2004-06-12 02:00 pm (UTC)

Re: If you have clicked on it in anyone's journal

yeah, it ticked me off, i automatically assumed that links in Ferrets journal were safe,.. it irks me, that trust, can be violated from the outside,..o.o
(Reply) (Thread)
[User Picture]From: zoethe
2004-06-12 02:02 pm (UTC)

Re: If you have clicked on it in anyone's journal

Yeah, it was one of those things where he was away from his computer and I clicked and then called him in: "Hey, I don't get it..." He took one look and charged off to his computer, cursing. He had no idea it was there.
(Reply) (Parent) (Thread) (Expand)
(Deleted comment)
[User Picture]From: theferrett
2004-06-12 02:25 pm (UTC)
You click that link, and it automatically redirects and posts the link to your journal, using your stored password. A trivial hack, but an annoying one, and one that opens the gates for worse abuses.
(Reply) (Parent) (Thread) (Expand)
[User Picture]From: the_siobhan
2004-06-12 02:32 pm (UTC)
There's one going around my friends list that says "I SHAG GOATS". I expect to see a variety of versions of it before it finally dies down.
(Reply) (Thread)
[User Picture]From: babysmomma
2004-06-12 02:57 pm (UTC)
would clicking on that link be a good reason my computer has been running so slow and i am having so many problems with stuff to just up and quit responding. i have had a very annoying day trying to figure out why everything is so slow, and not working right.
(Reply) (Thread)
[User Picture]From: ohhjuliet
2004-06-12 03:26 pm (UTC)
Nope, that's a whole separate mystery... lucky you...
(Reply) (Parent) (Thread) (Expand)
From: poeticangelx
2004-06-12 03:00 pm (UTC)
Oooh, a RUSTY spoon! Even better than just a plain ol' dull spoon, it's got flakes of rust on it!

Remind me never to get you angry.
(Reply) (Thread)
[User Picture]From: zoethe
2004-06-13 05:52 am (UTC)
Computer invasions bring out absolute fury in me.
(Reply) (Parent) (Thread)
[User Picture]From: misskitten77
2004-06-12 04:01 pm (UTC)
does it only affect LJ? or could it cause problems in my whole computer?
(Reply) (Thread)
[User Picture]From: zoethe
2004-06-13 05:55 am (UTC)
It shouldn't, according to the experts....
(Reply) (Parent) (Thread)
[User Picture]From: wolflady26
2004-06-12 04:06 pm (UTC)
Soooo, if I don't show that post in my "recent" entries, that means I didn't click on it and forget I'd done it, right?

I normally don't click on links without a good reason, but who knows what happens when I'm bored ;)
(Reply) (Thread)
[User Picture]From: zoethe
2004-06-13 05:55 am (UTC)
It would have been pretty immediate.
(Reply) (Parent) (Thread)
From: lunarhalolunacy
2004-06-12 06:41 pm (UTC)

Re: Agreed

"I hope the lj people track down this bastard and remove his genitals with a rusty spoon."

I like your thinking... :)
(Reply) (Thread)
[User Picture]From: elf_inside
2004-06-12 08:23 pm (UTC)
This could be prevented by locking the cookies so 3rd-parties can't read them... unfortunately, that might interfere with embedded journals....
(Reply) (Thread)
[User Picture]From: elf_inside
2004-06-12 08:23 pm (UTC)
That is, could be prevented by the LJ staff... that's not a chane the end-user can make.
(Reply) (Parent) (Thread)
[User Picture]From: kibbles
2004-06-12 11:48 pm (UTC)
LJ doesnt seem to give a flying fuck, based on replies 'support' has given a friend of mine.

(Why oh why don't I use my paid service more -- every time I think that I give LJ money, I twitch.)
(Reply) (Thread)
[User Picture]From: nicked_metal
2004-06-13 05:23 am (UTC)
You might be interested to know that the security hole has been fixed, and support volunteers have asked management to make an official statement about what happened.

If a support reply came with a rushed tone, this may have been due to the very large number of requests that are made when something like this happens. Since support doesn't have any automatic systems for making replies, the humans get a bit stressed when major events occur.
(Reply) (Parent) (Thread) (Expand)