YouTube gets compromised early morning of Sunday, July 4th!

moltar

Violating Airspace
Jul 8, 2009
987
10
0
Canada
YouTube was compromised with a JavaScript infection exploit, that seems to be originating from non other than 4chan. The exploit allows comment poster to inject stupid shit like scrolling text, but advanced users obviously have figured out how to redirect to other websites and steal cookie sessions.

Around 10am YouTube had set all of the comments to "Safety Mode", basically that hides all comments. Users must click "Show comments" to see the comments. "Safety mode has hidden comments for this video".

Info from reddit.

Just a word of warning. Before this all gets fixed, if you have viewed any videos today, better logout from your account and don't login until it is fixed. Logging out will basically delete your session cookie and prevent the attacker from obtaining access to your account. Don't view any videos while logged in.
 


I wanted to, but by the time it was all said and done, the hole was patched up. I was up at 9 AM EST :)
 
This is really sucking . An search giant can't provide this kind of poor service.