{"id":16,"date":"2004-06-12T13:59:06","date_gmt":"2004-06-12T17:59:06","guid":{"rendered":"http:\/\/www.scaredpoet.com\/wordpress\/?p=16"},"modified":"2004-06-12T19:58:13","modified_gmt":"2004-06-12T23:58:13","slug":"whoo-livejournal-scripting-hack-lets-spread-it-around","status":"publish","type":"post","link":"https:\/\/scaredpoet.com\/blog\/?p=16","title":{"rendered":"Livejournal vulnerability making the rounds"},"content":{"rendered":"<p>Apparently a <a href=\"http:\/\/www.livejournal.com\/users\/theferrett\/308563.html\">scripting vulnerability of some sort<\/a> has been found that causes things like LJ posts to be deleted if the script is run.  Supposedly the hack is &#8220;harmless&#8221; as it only does certain things related to deleting posts, but it does reinforce the idea of why I&#8217;d rather have full control of my own blog.    At least here I can back up my own server and restore if something goes wrong.<\/p>\n<p>UPDATE: apparently this hack does a lot more than just delete a post or two.  This vulnerability apparently also has the capability to lock people out of their accounts, changing the account password and compromising security.  You will also have a good idea of <a href=\"\/images\/stupid1.jpg\">who&#8217;s infected<\/a> because the lj username of compromised accounts show up in <a href=\"\/images\/stupid2.jpg\">the &#8220;sausage&#8221;<\/a>.   <\/p>\n<p>For now, my suggestion to LJ users is to avoid clicking on any LJ links that read &#8220;This is interesting&#8221; or refer to the &#8220;sausage.&#8221;  Russian posts should be avoided too.  And if you have added yourself to the &#8220;sausage,&#8221; you should change your password and log out and back in to your LJ account immediately.<strong><em><\/em><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Apaprently this vulnerability isn&#8217;t major, but it&#8217;s something to look out for.<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-16","post","type-post","status-publish","format-standard","hentry","category-gadgets-widgits-and-whatzits"],"_links":{"self":[{"href":"https:\/\/scaredpoet.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/16","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scaredpoet.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scaredpoet.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scaredpoet.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/scaredpoet.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=16"}],"version-history":[{"count":0,"href":"https:\/\/scaredpoet.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/16\/revisions"}],"wp:attachment":[{"href":"https:\/\/scaredpoet.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=16"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scaredpoet.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=16"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scaredpoet.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=16"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}