http://www.brainhandles.com/2007/11/12/how-the-myspace-hack-worked/ Whatever's tugging at my brain handles Wed, 19 Nov 2008 04:07:03 +0000 http://wordpress.org/?v=2.6.2 http://www.brainhandles.com/2007/11/12/how-the-myspace-hack-worked/#comment-3382 Brain Handles » Blog Archive » Validating User Input: Allowing Limited HTML Fri, 07 Dec 2007 00:45:42 +0000 http://www.brainhandles.com/2007/11/12/how-the-myspace-hack-worked/#comment-3382 [...] The recent MySpace hack, where band pages were hacked to cover them up with an invisible link that sent you to a malware infection site, showed that it can be dangerous to let users put HTML in their pages. To allow users to customize their pages with everything from images to new backgrounds, MySpace allowed some pretty complex HTML to be used. Hackers took advantage of that to use some CSS tricks to create those page overlays. [...] [...] The recent MySpace hack, where band pages were hacked to cover them up with an invisible link that sent you to a malware infection site, showed that it can be dangerous to let users put HTML in their pages. To allow users to customize their pages with everything from images to new backgrounds, MySpace allowed some pretty complex HTML to be used. Hackers took advantage of that to use some CSS tricks to create those page overlays. [...]

]]> http://www.brainhandles.com/2007/11/12/how-the-myspace-hack-worked/#comment-2499 killerch0 Wed, 14 Nov 2007 01:58:51 +0000 http://www.brainhandles.com/2007/11/12/how-the-myspace-hack-worked/#comment-2499 If you are stupid enough to give your pass to a phisher then you deserve it my opinion If you are stupid enough to give your pass to a phisher then you deserve it my opinion

]]>