Breaking - XSS in Scrapbook . If You Open Your Scrapbook You Can Be Hacked!

Yes. This is true. You can now get hacked even if you try to read your scraps. There is an XSS prevailing in the scrapbook, which allows the execution of malicious script, which can preform following actions:

• Stealing your cookies


• Logging you out and redirecting you to a fake page (screenshot)


• Logging you out and redirecting you to a page which automatically installs keylogger, viruses in your computer system.

SEE THIS

Ofcourse, precautions are always there. I am not too sure about the remedies though. Here are a few things you need if you want to stay safe on orkut

• Get Firefox - Latest Version (2.0.0.11)

Why -> The latest series of firefox comes with an inbuilt feature of httpOnly which encrypts your cookies so that the information in the cookie cannot be read. This may result to be a boon for orkut users.

Download -> You Can download the latest version of firefox from getfirefox.com or you can favor me and download it from the left sidebar 'must download' section.

• FlashBlock Firefox Addon - THE BIG ONE!

Why -> This add on will ensure that no flash file will execute without your prior consent. this is a must install in this case. This is the actual precaution in this issue.

Download -> Download this addon .

For furthur details :- READ THIS

Regards:-Orkut Plus