Livejournal vulnerability making the rounds

Apparently a scripting vulnerability of some sort has been found that causes things like LJ posts to be deleted if the script is run. Supposedly the hack is “harmless” as it only does certain things related to deleting posts, but it does reinforce the idea of why I’d rather have full control of my own blog. At least here I can back up my own server and restore if something goes wrong.

UPDATE: apparently this hack does a lot more than just delete a post or two. This vulnerability apparently also has the capability to lock people out of their accounts, changing the account password and compromising security. You will also have a good idea of who’s infected because the lj username of compromised accounts show up in the “sausage”.

For now, my suggestion to LJ users is to avoid clicking on any LJ links that read “This is interesting” or refer to the “sausage.” Russian posts should be avoided too. And if you have added yourself to the “sausage,” you should change your password and log out and back in to your LJ account immediately.

Leave a Reply

Your email address will not be published. Required fields are marked *

 

This site uses Akismet to reduce spam. Learn how your comment data is processed.