Posts by OrderZero

Network Solutions customers hit by mass hack attack

Failure

Why would people continue to do business with this company after so many breaches do people simply not care about their privacy anymore?

In any event I recently was hired as a freelancer to remove a message popping up in browsers that said "Malicious site" I poked around, yes it's Wordpress (not publicly vulnerable nor privately as far as I'm aware) and soon afterwards I saw the host and knew immediately how it happened. It was a simple iframe pointing to a blank page containing javascript highly obfuscated but when deobfuscated led to a familiar drive-by exploit It's a shame that a company this large is so insecure.

MoD website outflanked by XSS flaws

Are you serious...

I figured someone posting about this would know more about these kind of flaws..this is harmless. What you're thinking of are things like forums, blogs, etc. where the xss code is stored and echo'd everytime someone views the page. In this case you might aswell go into your browser and type javascript:alert('hack'); because this is temporary it's only echo'd to the user who types in the arbitrary code no one else.

Please next time before instilling fear into people do research on what you're showing them.