WTF happened to friendster?

• Plastic Bag

  12 Sep 07, 18:30

  facebook FTW~!
• redstone

  12 Sep 07, 22:46

  Originally posted by ndmmxiaomayi:

  It's either done via XSS (IFRAME is allowed in Friendster), or their computers were already compromised before the hack.
  
  Since most users use IE, it loads the IFRAME, allowing XSS to take place, steal passwords and edit the profile, all without the users realizing.
  
  Those using IE-based browsers are affected as well, like Maxthon and Avant.
  
  The likelihood of a computer that's already compromised to do the hack is quite low, since it affects a lot of people. On such a large scale, there must be something that's vulnerable enough.

  I use ff, comp won't be affected right?
• ndmmxiaomayi

  12 Sep 07, 23:09

  Originally posted by redstone:

  I use ff, comp won't be affected right?

  Nope. XSS doesn't download anything... it's either loaded via IFRAME or scripts. It depends on the technical skills of the attacker.
• redstone

  13 Sep 07, 03:43

  Originally posted by ndmmxiaomayi:

  Nope. XSS doesn't download anything... it's either loaded via IFRAME or scripts. It depends on the technical skills of the attacker.

  Phew, thanks. So the guy damn boliao create such a bug?
  
  Paiseh I'm IT dummy.
• Aaron8209

  18 Sep 07, 22:44

  cant displayed...OMG>>>>
• chillz88

  18 Sep 07, 23:23

  use facebook lar
• Aaron8209

  18 Sep 07, 23:25

  facebook boring la...frenster still the best...
• Aaron8209

  25 Sep 07, 21:51

  How to off the private??LOL....make it public...
• Sagara

  25 Sep 07, 22:03

  mine no prob leh