Controversial forum community 4chan exploited a vulnerability in the YouTube comment's system to target singer Justin Beiber's videos.
The attack exploited a HTML injection vulnerability to insert scripts into the comments which allowed 4chan members to initiate pop-ups or redirections to other sites for anyone who viewed the impacted YouTube video pages. Videos relating to teen idol Justin Beiber were most affected as 4chan users continued a vendetta against the singer.
Google quickly took measures by initially turning comments onto not appearing by default and manually deleting the hack posts. In an impressively rapid turn around for a Sunday, Google had two hours hours later addressed the vulnerability and reinstated the comments system.
Google issued a statement to TheNextWeb.com on the issue:
“We took swift action to fix a cross-site scripting (XSS) vulnerability on youtube.com that was discovered several hours ago. Comments were temporarily hidden by default within an hour, and we released a complete fix for the issue in about two hours. We’re continuing to study the vulnerability to help prevent similar issues in the future.”
It's not thought that the hack posed any danger to the security of computers directly however web browsers may have been redirected to web sites hosting malware which can exploit other vulnerabilities to cause more serious damage.
Advertisement
Related Stories
- Google's Motorola buy gets the green light Feb 14th 2012 at 7:49AM
- Google planning home invasion? Feb 10th 2012 at 6:58AM
- Google brings Chrome beta to Android at last Feb 8th 2012 at 2:43AM
- Google's Tech City campus coming soon Feb 7th 2012 at 1:45PM
- Google describes 'Bouncer' Android anti-malware system Feb 3rd 2012 at 6:41AM
- Google Maps fined for unfair competition Feb 2nd 2012 at 4:01PM
- The US and China are responsible for 40 per cent of global hacks Feb 2nd 2012 at 6:37AM
- Symantec tells users to disable PCAnywhere Jan 27th 2012 at 7:10AM
- Facebook, Twitter engineers 'improve' Google social search Jan 24th 2012 at 12:00AM
- Wikipedia blackout leads web SOPA protests Jan 18th 2012 at 7:36AM
Follow Follow this article if you would like to receive notifications of updates.
Add a new comment
You need to be logged in to post comments. If you do not have an account then please register.
Comments
0 comments
There are no comments yet, be the first to add one!