Details of the LiveJournal Account Hacks

An anonymous reader writes "Brian Krebs of the Washington Post has written about the recent spate of hijackings at Six Apart's popular LiveJournal service. Hundreds of journals have now been taken over by a notorious group called 'Bantown' using a series of complicated cross-site-scripting vulnerabilities. Krebs details the recent security changes made by LiveJournal in response to the takeovers." From the article: "It is unclear whether LiveJournal has managed to close the security holes that the hackers claim to have used. The company says it has, but the hackers insist there are still at least 16 other similar JavaScript flaws on the LiveJournal site that could be used conduct the same attack. [Bantown] group members said they plan to turn their attention to looking for similar flaws at another large social-networking site. "

Blog

[Ribbo.com]

Maybe they should write about how they did it in their blog, I mean someone elses blog.....

Poor Emos!

[Ardeocalidus]

Nooo! Poor Emos! I can just see them shivering in a cold, dank corner, cutting themselves because their journal was hi-jacked. What is becoming of this world?!

Livejournal hacks?

[Anonymous Coward]

Someone took all the amateur porn and replaced it with goatse?

Oh dear!

[Junky191]

How on Earth are all those white kids in the suburbs going to express their teen angst now?

Re:Livejournal hacks?

[gEvil (beta)]

I've seen your pictures and can definitively say that the hackers were doing the world a service.

Re:Poor Emos!

[hkgroove]

I can just see them shivering in a cold, dank corner, cutting themselves because their journal was hi-jacked.

No, they wouldn't. Because there's no longer a reason to cut themselves! No one can read or comment about it.

What a DANGEROUS thing to do...

[PortHaven]

How many livejournalers are unstable?

Whatch, some overly depressed LJ'er is going to flip out and take a sledgehammer to the skulls of the perpetrators. Very dangerous to mess with the jouranls of unstable people.

*click*
*cluck*
*cluck*
*cluck*
*cluck*

Just ignore the sound of me loading rounds into my clip...you didn't hear that...

Even more appalling...

[Orrin Bloquy]

...they hacked into my LJ and corrected all the meter in my "I am sad/I want to die" goth poetry!

Oh dear!-SlashBlog

[Anonymous Coward]

"How on Earth are all those white kids in the suburbs going to express their teen angst now?"

Post to Slashdot.

Great!

[blake3737]

Great! While they're in there hacking around they can fix all the spelling errors and bad grammer so prolific in LJ

Seen on a hacked page

[dkleinsc]

Current mood: 0wned

it was funny

[conJunk]

that was the funniest part of TFA:

So far, the damage has been mostly harmless. The most high-profile case so far came in mid-October when one Myspace.com user released a self-replicating computer worm that took advantage of Javascript flaws to add more than a million fellow users to his buddy list. A similar worm hit the online community Xanga on New Year's eve (there is also some strong language at this link.)

he used his worm to add people to his buddy list! that's really really funny! look how popular i am! i've got millions of friends! no one will laugh at me now!... er... i uh... yes... i wrote a worm to make friends for me....

Re:Poor Emos!

[ZeroExistenZ]

<Pax> I wish my lawn was emo, so it would cut itself. [bash.org]

MySpace

[phalse phace]

[Bantown] group members said they plan to turn their attention to looking for similar flaws at another large social-networking site.

[ says to himself ]
Please let it be MySpace. Please let it be MySpace.

Re:Oh dear!

[Anonymous Coward]

Now come on, its not just white kids in the suburbs whining about how daddy refused to buy them the optional little headlight wiper blades for their porche... its a site for shitty bands too!!

Bantown! (sung in the Petula Clark style)

[digitaldc]

When your site is down & Livejournal's making you angry
You can always blame - Bantown!
When you've got blogs, all the noise and the worry
Seems to stop, I know - Bantown!
Just listen to the music of the vulnerable website
Linger on the domain where the CSS is not right
You only lose!

The lags are much longer there
You can see all your troubles, see all your fear
So go Bantown! things'll be worse when you're
Bantown! - no security measures, for sure
Bantown! - everyone's waiting on you!

Re:What a DANGEROUS thing to do...

[RollingThunder]

The perpetrators just need to make sure they never visit the victim's parent's basements.

Re:What a DANGEROUS thing to do...

[rkanodia]

*click*
*cluck*
*cluck*
*cluck*
*cluck*

Somehow, I don't think they're going to be very afraid of the mechanical chicken you just activated.

Comment removed

[account_deleted]

Comment removed based on user account deletion

Re:Is Six Apart able to deal with this properly?

[Anonymous Coward]

Hey davidsyes, the library called and they want their book [amazon.com] back.

Re:I bet it's myspace

[MikeFM]

I'd be more impressed if they could index every dirty picture on MySpace and copy them all out so you could look at them in some linear way without having to work through all that annoying crap about peoples lifes. Gee at least that'd be useful.