1. This forum is in read-only mode.

YouTube has been hacked!!

Discussion in 'General Discussion' started by stirgo1212, Jul 4, 2010.

Page 1 of 3
  1. stirgo1212

    stirgo1212 Well-Known Member

    It seems that many popular YouTube videos have been injected with html scripts. I thought YouTube blocked that stuff! ive even seen a video which goes to the infamous 'meatspin' website. no doubt 4chan or ebaumsworld is behind all of this

    check out the video of 'chocolate rain'
    http://www.youtube.com/watch?v=EwTZ2xpQwpA


    or 'party in the usa'
    http://www.youtube.com/watch?v=M11SvDtPBhA


    Admin edit: You should log out of your youtube account until this is over.
     
    stirgo1212, Jul 4, 2010
    #1
  2. Seph

    Seph Administrator Staff Member

    No. It has not been hacked. This is a html/javascript injection, it can be quite dangerous but is *not* hacking, there are no user credentials a leaked or anything of the sort. It is a text comment posted which gets injected into the page.

    Saying youtube is hacked is extremely fail and just shows you have no idea what hacking is.
     
    Seph, Jul 4, 2010
    #2
  3. Stanley Richards

    Stanley Richards Well-Known Member

    Goodness me. That is quite scary.

    I never knew about this until now. Will it be safe to view those videos?
     
    Stanley Richards, Jul 4, 2010
    #3
  4. stirgo1212

    stirgo1212 Well-Known Member

    i think its safe, its mostly only the most popular videos that have the html injection
     
    stirgo1212, Jul 4, 2010
    #4
  5. Stanley Richards

    Stanley Richards Well-Known Member

    WoW... I just tried to view Doctor Ashen's video. and it brought me to a picture of a naked guy with *cut out due to crazy gore*
     
    Stanley Richards, Jul 4, 2010
    #5
  6. Loonylion

    Loonylion Administrator Staff Member

    still fail on youtube's part for not preventing it.
     
    Loonylion, Jul 4, 2010
    #6
  7. lugia543

    lugia543 Guest

    I was just about to post this when I watched an angry video game nerd episode! except it was a one man one jar video redirection.
     
    lugia543, Jul 4, 2010
    #7
  8. Stanley Richards

    Stanley Richards Well-Known Member

    I heard that there aren't any sort of Moderators moderating the website at all.
     
    Stanley Richards, Jul 4, 2010
    #8
  9. mds64

    mds64 Well-Known Member

    There are, who else removes the bad vids of people doing illegal stuff...takes ages though for action to happen once flagged.
     
    mds64, Jul 4, 2010
    #9
  10. Stanley Richards

    Stanley Richards Well-Known Member

    I see..

    I'll avoid youtube for now.

    But why isn't the main-page hacked?
     
    Stanley Richards, Jul 4, 2010
    #10
  11. lugia543

    lugia543 Guest

    some of my videos aren't hacked. or at least they are and I'm too scared to check
     
    lugia543, Jul 4, 2010
    #11
  12. Seph

    Seph Administrator Staff Member

    Did you not read what I posted at all? This is NOT hacking, it is a comment posted on the video as I wrote, there are no video comments on the main page so obviously the front page cannot become vandalized.
     
    Seph, Jul 4, 2010
    #12
  13. Stanley Richards

    Stanley Richards Well-Known Member

    The people are only targeting popular vids.

    Sorry. Was typing too fast. I meant injected.
     
    Stanley Richards, Jul 4, 2010
    #13
  14. Seph

    Seph Administrator Staff Member

    There are still no comments on the front page so there are no vectors to use to inject the code.

    Also, to expand on my "can be dangerous", it can be used to capture your session information, which means you should logout from youtube so your session will be destroyed and re-generated.
     
    Seph, Jul 4, 2010
    #14
  15. Stanley Richards

    Stanley Richards Well-Known Member

    Logged out as in Logged out from my Youtube account? I was never logged in.
     
    Stanley Richards, Jul 4, 2010
    #15
  16. lugia543

    lugia543 Guest

    i found the forum that is responsible. it's 4chan obviously.
    http://boards.4chan.org/v/res/65511385
    if it is against the rules to post 4chan links please don't hesitate to remove but well.. THIS IS THE SOURCE!!!!!
     
    lugia543, Jul 4, 2010
    #16
  17. Seph

    Seph Administrator Staff Member

    I don't think 4chan was the source, it just spread there really fast, and they're mostly doing malicious password scraping. I cannot say who discovered it, some people suggest ebaumsworld but that seems equally unlikely.
     
    Seph, Jul 4, 2010
    #17
  18. lugia543

    lugia543 Guest

    who could it be. somebody gotta fix this soon
     
    lugia543, Jul 4, 2010
    #18
  19. yoshi2889

    yoshi2889 Well-Known Member

    I am browsing the video's in the first post and the security mode is active...

    "Reacties op deze video zijn verborgen door de veiligheidsmodus."
    "Comments on this video are hidden by the security mode." (translated)

    I think Google or YouTube is aware of this problem...
    Post Merge: [time]1278253467[/time]
    But when viewing the comments YouTube acts weird...
     
    yoshi2889, Jul 4, 2010
    #19
  20. lugia543

    lugia543 Guest

    yeps. hope youtube can counter-attack this attack. it's just a script prank. hopefully youtube can disable script comments and this would never happen again
     
    lugia543, Jul 4, 2010
    #20
Page 1 of 3