WTF happened to friendster?

• redstone

  12 Sep 07, 01:42

  There's this "carnivore" page showing picture of a pitcher plant.
  
  Then I found many of my friends' profiles changed, and mine too. Location changed to Phoenix, Oregan.
  Can't view profile, can't commet, etc alot of problems.
  
  
• seotiblizzard

  12 Sep 07, 01:56

  my guess is it got hacked.
  
• redstone

  12 Sep 07, 02:01

  Originally posted by seotiblizzard:

  my guess is it got hacked.
  

  First sign of trouble is my friend's age got changed to 16. Then I found I can't access someone's friends list. Now my profile was resetted. To Female, 16, living in Oregan, Phoenix.
• seotiblizzard

  12 Sep 07, 02:04

  Originally posted by redstone:

  First sign of trouble is my friend's age got changed to 16. Then I found I can't access someone's friends list. Now my profile was resetted. To Female, 16, living in Oregan, Phoenix.

  yup i am right it got hacked.
  
• redstone

  12 Sep 07, 02:05

  Originally posted by seotiblizzard:

  yup i am right it got hacked.
  

  Yours was hacked too?
• Trump_Card

  12 Sep 07, 02:12

  Same here!!!
  
  After I accepted a friend request from my 'class' account ... The strange thing is my email doesn't have a mail from friendster saying i have a friend request from that account ...
• redstone

  12 Sep 07, 02:15

  It also prompts me to download "flash player" but the link is not from Adobe. Initially I thought was from Friendster.com, but now... I fear my comp might kena virus. Sia...
• venny

  12 Sep 07, 02:17

  gosh, some of my frens account also liddat..... looks serious, some carnivore thing too..... lucky mine still looks fine...
  
  it links to this site. looks harmless though.
  http://wiki.carnivoren.org/logos/
  
  curiously, the site says
  
  Die Seite konnte leider nicht gefunden werden.
  Haben Sie sich vielleicht vertippt oder eine alte URL aufgerufen?
  
  Wenn nicht, schreiben sie bitte eine E-mail an den Webmaster.
  
  translates to:
  The side could not be found unfortunately. Did you perhaps mistype or old URL did call? If not, they write please email the Web master
• iveco

  12 Sep 07, 02:32

  Hackers at work. Seems like they may be from Germany.
• seotiblizzard

  12 Sep 07, 02:33

  Originally posted by redstone:

  Yours was hacked too?

  nope.
  one of my close friends got it.
  something similar.
• venny

  12 Sep 07, 02:42

  anyone know a solution? can simply putting in new css code resolve this problem?
• redstone

  12 Sep 07, 02:43

  Originally posted by venny:

  anyone know a solution? can simply putting in new css code resolve this problem?

  I removed the HTML code of the carnivor thingy from my profile.
• Trump_Card

  12 Sep 07, 02:43

  Originally posted by venny:

  anyone know a solution? can simply putting in new css code resolve this problem?

  You also hit by virus ? Wat kind of virus ? '
  
  Mine seems like a different one from TS ...
• venny

  12 Sep 07, 02:46

  i looked through the page of my frens profile and realise that it seems to affect the background part of the html code. appears to be an exploit of a bug. so i guess simply removing part of the code regarding the carnivore part might do the trick.
  
  

  Originally posted by redstone:

  I removed the HTML code of the carnivor thingy from my profile.

  can post here the code u removed? so we can analyse it and see how to solve the prob
• redstone

  12 Sep 07, 03:07

  Originally posted by venny:

  i looked through the page of my frens profile and realise that it seems to affect the background part of the html code. appears to be an exploit of a bug. so i guess simply removing part of the code regarding the carnivore part might do the trick.
  
  can post here the code u removed? so we can analyse it and see how to solve the prob

  Removed it liao. I didn't save the code. Maybe you ask those friends affected? Ask them to edit their profile, and see under "About Me" got any weird code.
• Vigelic

  12 Sep 07, 06:05

  its basically just another version of the loophole after friendster allowed HTML codes on profiles..
  
  already happen so many times.. that time was winning lottery/sweepstakes click ok to claim ur prize then redirect to a 3rd party website.
  
  after that was saviour of the soul picture that will make the whole page white and a logo that says saviour of the soul
  
  now is this.. just edit profile find the code that is not u ownself put one and remove it..
  
  in future, after u finish putting in code and there's still space at the back xx characters left, type
  
  
• venny

  12 Sep 07, 12:53

  actually im curious hw the hacker added extra code to the profile? dont they need the psw to edit it? or maybe thats wat they hacked?
  then those affected mus change their psw too to prevent another attack
• ndmmxiaomayi

  12 Sep 07, 17:30

  It's either done via XSS (IFRAME is allowed in Friendster), or their computers were already compromised before the hack.
  
  Since most users use IE, it loads the IFRAME, allowing XSS to take place, steal passwords and edit the profile, all without the users realizing.
  
  Those using IE-based browsers are affected as well, like Maxthon and Avant.
  
  The likelihood of a computer that's already compromised to do the hack is quite low, since it affects a lot of people. On such a large scale, there must be something that's vulnerable enough.
• venny

  12 Sep 07, 17:35

  ooo..... thanks mayi.
  
  so ff nt affected?
• Aaron8209

  12 Sep 07, 17:43

  is bug...ur detail will be changed.nth much..dun worry.
• ndmmxiaomayi

  12 Sep 07, 18:06

  Originally posted by venny:

  ooo..... thanks mayi.
  
  so ff nt affected?

  Not that I know of.
• venny

  12 Sep 07, 18:08

  heng i use ff. mayi... add me on ur frenster lehz.....
• ndmmxiaomayi

  12 Sep 07, 18:10

  Email in my profile linky.
• Y_Shun

  12 Sep 07, 18:11

  Friendster should solve these problems asap. Not the first time liao
• venny

  12 Sep 07, 18:13

  Originally posted by ndmmxiaomayi:

  Email in my profile linky.

  okie!