Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 18 submissions in the queue.

JavaScript Attack Targets 4/8chan

posted by cmn32480 on Wednesday September 23 2015, @08:36AM   Printer-friendly
from the another-reason-to-turn-off-javascript dept.

fleg writes:

From Venture Beat:

Hackers have somehow infiltrated cat-GIF-meme-photo-sharing site Imgur to direct overwhelming volumes of traffic at 4chan, the freewheeling-forum that hosts some of the Web's darker conversations.

Naturally, this problem was uncovered over at Reddit. "When an Imgur image is loaded from /r/4chan, imgur loads a bunch of images from 4chan's content delivery network or 8chan (unclear at this point, might be both), which causes a DDoS to those sites."

Reddit thread which originally reported it here. From another thread on reddit:

"This isn't a DDOS. It's targeting 8chan users and leaving javascript code in their local storage that causes their browsers ping back to a command and control server each time they hit an 8chan page. Thus far the C&C server hasn't sent out any commands (or stopped issuing commands before this was discovered). Over the evening whoever authored this has been updating and changing their code. It only effects very specific imgur images/pages. Why is not yet known."

Update: Newer articles.

Original Submission #1  Original Submission #2 

 
This discussion has been archived. No new comments can be posted.
JavaScript Attack Targets 4/8chan | Log In/Create an Account | Top | 19 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 4, Informative) by maxwell demon on Wednesday September 23 2015, @08:13PM

    by maxwell demon (1608) on Wednesday September 23 2015, @08:13PM (#240693) Journal

    Note this:

    Unlike NoScript, YesScript does absolutely nothing to improve your security.

    Indeed, at the time you can blacklist the site, the exploit already happened.

    --
    The Tao of math: The numbers you can count are not the real numbers.
    Starting Score:    1  point
    Moderation   +2  
       Informative=2, Total=2
    Extra 'Informative' Modifier   0  
    Karma-Bonus Modifier   +1  
    Total Score:   4  

  • (Score: 2) by number6 on Wednesday September 23 2015, @08:40PM

    by number6 (1831) on Wednesday September 23 2015, @08:40PM (#240703) Journal

    Some websites have got annoying asshole JS running which pops up a messagebox forcing you to give it input otherwise it will not allow you to leave the page---YOU ARE LOCKED INTO THE PAGE !!
    If you try to close the page or tab, the messagebox appears and you MUST give it input---WHO KNOWS WHAT THE FUCK WILL START RUNNING IF YOU CLICK OK !!
    BUT... if you have 'YesScript' installed, you just click its icon and JS is instantly disabled on that page---you can easily close the page or tab now and move on outta there...and leave that site blacklisted !!