YouTube hacked, Justin Bieber’s fans cried. Some suicide.

No, there’s non that died during the attempt of hacking. During the Independence Day of United State, a couple of pranksters well armed with some knowledgeable skills of scripting ‘hacked’ YouTube’s comment system, specifically targeting Justin Bieber’s video. What a nice Independence Day the YouTube team had.
By placing a tag in front of a comment post, the hackers are able to run some scripts on the page when those videos started playing. The hackers exploited the vulnerability and managed to fool a number of Justin Bieber fans.

“The tag itself is escaped, but everything following it is cheerfully placed in the page as is. Blacked out pages with giant red text scrolling across them, shock site redirects, and all sorts of other fun things have been spotted,” writes Soulskill.
Though Justin Bieber wasn’t the main target, they were still on the receiving end of a lot of the trickery; several videos showed a pop-up that said Bieber had died in a car crash. Must’ve made a lot of poor little girls cried when the fireworks run wild.
Google stated that they had contained the problem after fixing it for about two hours after the discovery.
“We took swift action to fix a cross-site scripting (XSS) vulnerability on youtube.com,” a spokesperson said. “Comments were temporarily hidden by default within an hour, and we released a complete fix for the issue in about two hours.”
There’s still no name on the culprit of this attacks, but many have pointed to the /anons/ at 4Chan due to this cute screenshot. A nice shot in their own foot. Nicely done 4Chan.

[via Toms Hardware]










