For the love of god stop panicking
14 years ago
FA is so fucking fickle about this, they get any idea about OMG HAXXORZ and everyone starts to panic. Like when half of FA stopped using PM's entirely because of a hacking incident.
But this is ridiculous. This isn't even a hack, this is an exploit that's mostly harmless.
I keep seeing people posting journals saying OMG DONT CLICK LINKS IN JOURNALS OR YOU GET HACKED OMGGZZ. One person said ANY LINK COULD BE A HACK!
This was one link, one site, that one clown made with a Javascript that sends a posted form back to FA from your own browser. It's not stealing your password, it's just having your browser post a bit of information to FA, which FA then reads as a journal post, and it only works because you're already logged in, and because FA recognizes it as coming from your browser.
It's just a silly internet prank that can't do any real harm, so stop panicking and for the love of god don't assume that every link on every journal on FA is a threat just because of this.
But this is ridiculous. This isn't even a hack, this is an exploit that's mostly harmless.
I keep seeing people posting journals saying OMG DONT CLICK LINKS IN JOURNALS OR YOU GET HACKED OMGGZZ. One person said ANY LINK COULD BE A HACK!
This was one link, one site, that one clown made with a Javascript that sends a posted form back to FA from your own browser. It's not stealing your password, it's just having your browser post a bit of information to FA, which FA then reads as a journal post, and it only works because you're already logged in, and because FA recognizes it as coming from your browser.
It's just a silly internet prank that can't do any real harm, so stop panicking and for the love of god don't assume that every link on every journal on FA is a threat just because of this.
FA+

Just saying.
Also people are tards for clicking on that crap XD Especially the ones that did it like four times lol.
Lots of sites are vulnerable to this, it even happened to Deviantart recently.
Either that or just exploit the vulnerability for the sake of doing so.
This was nothing more than a cyber prank. No malicious intent beyond causing a little ruckus. I can assure you they weren't trying to DDOS
You and I were just talking about this earlier today! XD