Skip to Content

AOL Tech

metafilter posts

Computers

Major Security Holes Found in YouTube, MetaFilter, ING, and NYT

Major Security Holes Found in YouTube, MetaFilter, ING, and NYT
Researchers at Princeton University found major security holes (warning: PDF) in several popular Web sites. The sites were found to be vulnerable to so called cross-site request forgery (CSRF) attacks, which could allow hackers to manipulate a user's browser or steal information even from a trusted site.

YouTube, MetaFilter, The New York Times, and ING were all found to be vulnerable to these attacks, though all the sites have since plugged the holes. The vulnerability didn't effect all of the sites in the same way, but all would have compromised user data.

The most dangerous vulnerability existed on ING, where a hacker could have used the hole to create an account on behalf of a customer and transfer funds to the new fraudulent account. YouTube accounts were open to attacks that would allow a user's favorites and friends lists to be hijacked. MetaFilter accounts were effected in the same way. The New York Times Web site left users e-mail addresses vulnerable by harvesting by hackers who could then build e-mail lists for spamming.

The holes have all been plugged after being alerted by researchers, but leaves us to wonder what potentially dangerous weaknesses are left undiscovered out there on the Web. The group did create a Firefox extension that protects a user from CSRF attacks even if a Web page isn't properly guarded against them. [From: CNET]

Switched Video

Follow Switched on Twitter

Deals of the Day

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews

    9.0 out of 10

    Definitive Technology BPX
    Works great with Dolby Pro Logic and Dolby Digital. Full Review

    9.0 out of 10

    Denon AVR-4306 (black)
    Incredibly well-featured 7.1-channel receiver; excellent sound quality; three HDMI inputs; converts analog video to HDMI output; upconverts analog video to 720p/1080i HD resolution; iPod and USB MP3 player connectivity; Internet radio and MP3/WMA streaming audio via built-in Ethernet port; XM Satellite Radio compatible; touch-screen remote; multizone, multisource operation; browser-based control via home network; accurate autocalibration routine. Full Review

    8.8 out of 10

    KEF KHT3005 (black)
    The KEF KHT-3005 is one compact, beautifully designed speaker package with solid aluminum satellites that feature unique driver technology to produce incredible clarity. Meanwhile, the equally astounding dual 10-inch, 250-watt powered subwoofer delivers ultradeep bass. Full Review

  • Cell Phone Reviews

    8.7 out of 10

    SignalBoost Mobile Professional Amplifier Kit
    The Mobile Professional Amplifier delivers a powerful signal boost to your cell phone. Also, it offers a compact design and easy setup. Full Review

    8.6 out of 10

    Wi-Ex zBoost YX510-PCS-CEL cell phone signal extender
    The Wi-Ex zBoost YX510-PCS-CEL significantly boosts your cell phone reception and is easy to operate. Also, it uses a wireless connection to your phone. Full Review

    8.3 out of 10

    LG VX6000 (Verizon Wireless)
    Compact and stylish; impressive battery life; solid audio quality; sharp color screen; built-in camera; USB ready; affordable. Full Review

  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.3 out of 10

    Nikon D3 (body only)
    Full-frame sensor; well designed, pro-level weather-sealed body; very low noise, even at extremely high ISOs; fast. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

  • Desktop Reviews

    8.5 out of 10

    Apple iMac (24-inch, 2.8GHz)
    A minor specification update results in some significant performance gains; graphics upgrade an option on this 24-inch model; sleek, polished design didn't receive an update, but we won't start clamoring for a new design until the current one is at least 12 months old. Full Review

    8.4 out of 10

    Apple iMac (27-inch, 3.06Hz Intel Core 2 Duo, ATI Radeon HD 4670, Fall 2009)
    Largest display among all-in-ones; fast dual-core CPU makes up for lack of quad-core (mostly); finally has an SD card slot; wireless mouse and keyboard; Mini DisplayPort input ripe with possibility. Full Review

Featured Galleries

Nissan Land Glider
Vintage Keyboards
Retro Computer Logos
Vintage Computer Festival
Motorola CLIQ
iPod touch
iTunes 9
Video iPod Nano
The Beatles: Rock Band

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources