PSA: Embed exploit on LJ
Wednesday, September 23rd, 2009 03:20 pm![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
afunaUrgent security notice: embedded content security breach
And a few things:
Easiest way to know if you've been infected is to look at the top entry on http://www.livejournal.com/editjournal.bml, and check for any <lj-embed> tags. (Mine had four in a row; I don't know if that is the case for everyone)
LiveJournal has temporarily disabled embeds for your safety, so if you're not already infected, you can't be anymore.
Dreamwidth is not affected. Clone sites like InsaneJournal and DeadJournal, I'm not sure; my guess is they're not, but it depends on how they've set up embeds.
(I know it's irrational, but my journal feels dirty now :-()
ETA: After poking about a bit, I am pretty sure (some 95%) that IJ and DJ are not affected
ETA2: Official entry
And a few things:
Easiest way to know if you've been infected is to look at the top entry on http://www.livejournal.com/editjournal.bml, and check for any <lj-embed> tags. (Mine had four in a row; I don't know if that is the case for everyone)
LiveJournal has temporarily disabled embeds for your safety, so if you're not already infected, you can't be anymore.
Dreamwidth is not affected. Clone sites like InsaneJournal and DeadJournal, I'm not sure; my guess is they're not, but it depends on how they've set up embeds.
(I know it's irrational, but my journal feels dirty now :-()
ETA: After poking about a bit, I am pretty sure (some 95%) that IJ and DJ are not affected
ETA2: Official entry
no subject
Date: 2009-09-23 05:52 pm (UTC)*Hugs*