PSA: LJ media embedding hack

[smarriveurr]

I know I seldom checked news regularly, so there must be more out there

Comments

[moon_ferret]

Mine was hacked. Fuck.

GAH.

[moon_ferret]

And I think my password was changed. You bastards.

[smarriveurr]

Your password doesn't work... you aren't logged in now? I am confused.

[smarriveurr]

So far, it seems the only real risks were

A) Private entries turned public
B) Email harvesting

And the latter isn't even that big a deal unless your email account is an old inactive hotmail account or somesuch, so I wouldn't worry unduly. In fact, if this infection operated like they say, it's probably the best first exploit on the security hole you could hope for - nobody lost content, passwords weren't altered, etc, etc.

[smarriveurr]

Nope! Apparently it's also an excellent unsecure vector for crossdomain attacks!