Controversial forum community 4chan exploited a vulnerability in the YouTube comment's system to target singer Justin Beiber's videos.
The attack exploited a HTML injection vulnerability to insert scripts into the comments which allowed 4chan members to initiate pop-ups or redirections to other sites for anyone who viewed the impacted YouTube video pages. Videos relating to teen idol Justin Beiber were most affected as 4chan users continued a vendetta against the singer.
Google quickly took measures by initially turning comments onto not appearing by default and manually deleting the hack posts. In an impressively rapid turn around for a Sunday, Google had two hours hours later addressed the vulnerability and reinstated the comments system.
Google issued a statement to TheNextWeb.com on the issue:
“We took swift action to fix a cross-site scripting (XSS) vulnerability on youtube.com that was discovered several hours ago. Comments were temporarily hidden by default within an hour, and we released a complete fix for the issue in about two hours. We’re continuing to study the vulnerability to help prevent similar issues in the future.”
It's not thought that the hack posed any danger to the security of computers directly however web browsers may have been redirected to web sites hosting malware which can exploit other vulnerabilities to cause more serious damage.
Advertisement
Related Stories
- Developer fined £50,000 over fake Angry Birds app May 25th 2012 at 12:28PM
- Google introduces Knowledge Graph for more intelligent search May 17th 2012 at 10:55AM
- Google's multi-Nexus Android strategy May 16th 2012 at 12:56AM
- Mozilla, Google blast Windows RT browser restrictions May 11th 2012 at 3:47AM
- Java judge will not rule on Android "fair use" May 11th 2012 at 1:52AM
- Google lets anyone be a TV station May 7th 2012 at 10:55PM
- Jury fails to fully decide in Oracle vs Google May 7th 2012 at 10:28PM
- Jury struggles for verdict in Oracle vs Google May 6th 2012 at 11:56PM
- Google SPDY tech speeds the mobile web May 3rd 2012 at 1:02AM
- Google unveils Cube web game Apr 30th 2012 at 11:03PM
























