[RESOLVED] Cookie Thievery -- Possible account hijack attemp
WARNING: THE FOLLOWING LINK WILL STEAL YOUR FA COOKIE INFORMATION. I'm not going to do anything malicious with it, but I just want to warn anyone who may follow this link: http://www.furaffinity.net/replyto/journal/128391/
Basically, the script reads your cookie information, then saves your userid and sessionid to a plain text file. What a hacker would be able to do from there is basically take their own cookie information and replace it with yours, thus giving themselves free reign over your account.
This is pretty much a serious bug that should be fixed immidiately, but may not be unless something malicious happens. (HINT HINT, Crypto!)
Basically, the script reads your cookie information, then saves your userid and sessionid to a plain text file. What a hacker would be able to do from there is basically take their own cookie information and replace it with yours, thus giving themselves free reign over your account.
This is pretty much a serious bug that should be fixed immidiately, but may not be unless something malicious happens. (HINT HINT, Crypto!)
Category All / All
Species Unspecified / Any
Size 200 x 200px
File Size 6.5 kB
*smiles* i don't know where you got the idea that there was any 'hacking scare' in the coder department.
we fix stuff on a daily basis. we just don't make this information public, that's all. warriors of the invisible frontier we are.
sure, you /could/ have noticed some cases of overreaction regarding the bugs, but not from the people handling them.
....
that admin wasn't me. :)
trust me, i couldn't care less if FA got hacked again. :D Infact, i'd be kind'a excited. there are no consequences we can't fix and the more hacks, the faster we plug those security holes, since we receive a detailed information on each of them, no mater if they are being exploited or simply tested.
we fix stuff on a daily basis. we just don't make this information public, that's all. warriors of the invisible frontier we are.
sure, you /could/ have noticed some cases of overreaction regarding the bugs, but not from the people handling them.
....
that admin wasn't me. :)
trust me, i couldn't care less if FA got hacked again. :D Infact, i'd be kind'a excited. there are no consequences we can't fix and the more hacks, the faster we plug those security holes, since we receive a detailed information on each of them, no mater if they are being exploited or simply tested.
FA+

Comments