Sigh

[bryant]

I'm not clicking on any links in LiveJournal entries until they fix the security hole. Recommend you don't either. Long story short, it's immensely easy to set up a page which, when you view it, will post something to your journal. That something can include a link to a page which, when you view it -- well, you get the idea.

I don't see any password theft vulnerabilities but I haven't really put too much effort into thinking about it, so I could be wrong.

I also have no idea how this gets fixed.

Sigh.

Comments

[janne.livejournal.com]

Learned about this from somebody who mailed the apparent originator of (one of) the LJ viruses. The reply is worth reading: http://www.livejournal.com/users/solarbird/201739.html