Cross-site scripting worm hits MySpace - 未名空间MITBBS历史存档

国际科技财经博客移民网络热点娱乐民生时事公众号

Redian新闻

>未名空间

>Security - 系统安全

Cross-site scripting worm hits MySpace

Cross-site scripting worm hits MySpace# Security - 系统安全

c*t2005-10-14 07:10

1 楼

With the advent of social networking sites, becoming more popular is as easy
as crafting a few lines of JavaScript code, it seems.
One clever MySpace user looking to expand his buddy list recently figured out
how to force others to become his friend, and ended up creating the first self
-propagating cross-site scripting (XSS) worm. In less than 24 hours, "Samy"
had amassed over 1 million friends on the popular online community.
How did Samy transcend his humble beginnings of only 73 friends to b

A*o2005-10-14 07:10

2 楼

I got that yesterday from a mailing list as well.
It's interesting to look at these issues. I hope MIT won't have such an issue.

out
self
lax

【在 c**t 的大作中提到】

: With the advent of social networking sites, becoming more popular is as easy
: as crafting a few lines of JavaScript code, it seems.
: One clever MySpace user looking to expand his buddy list recently figured out
: how to force others to become his friend, and ended up creating the first self
: -propagating cross-site scripting (XSS) worm. In less than 24 hours, "Samy"
: had amassed over 1 million friends on the popular online community.
: How did Samy transcend his humble beginnings of only 73 friends to b