How hackers break in: the most common attacks on people, websites and apps
Cross-site scripting: how a comment on a website can attack the next visitor
You read the comments under a product before you buy it. One of those comments can attack you, and you do not need to click anything. How is that possible? This is cross-site scripting (XSS). In 2005, a worm of this kind reached over a million MySpace profiles in less than a day.
-
1
Under each candle, customers leave reviews, and the shop shows them to everyone who comes by. You read a few before you buy: "Smells like a bakery!"
-
2
Rono writes one too: five stars, "Lovely candle!". It looks like any other review, though he never bought a candle. The shop keeps it and shows it to every visitor, you included. What can a review do to the person who reads it?
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88