PSA: Embed exploit on LJ

Urgent security notice: embedded content security breach

And a few things:

Easiest way to know if you've been infected is to look at the top entry on http://www.livejournal.com/editjournal.bml, and check for any <lj-embed> tags. (Mine had four in a row; I don't know if that is the case for everyone)

LiveJournal has temporarily disabled embeds for your safety, so if you're not already infected, you can't be anymore.

Dreamwidth is not affected. Clone sites like InsaneJournal and DeadJournal, I'm not sure; my guess is they're not, but it depends on how they've set up embeds.


(I know it's irrational, but my journal feels dirty now :-()

ETA: After poking about a bit, I am pretty sure (some 95%) that IJ and DJ are not affected

ETA2: Official entry

A day's worth of Twitter ($3.00)

15:05:25	—	@exor674 login page is kinda expected I guess. I misunderstood though! They looked banner-y but they're feature blurbs or something
15:05:55	—	@exor674 er, that is, no ads on the logout page, if you just logged out from a paid account.
23:24:09	—	@gils9965 hmm I'm not sure how you can drag an entire message. no convenient handle to click!

Total: 3 tweets

You can find me as afuna on Twitter.

A day's worth of Twitter (3)

( 3 babbly tweets for 2009-09-23 )