[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] Chat Embeds -- How Evil Are They???
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: [Full-disclosure] Chat Embeds -- How Evil Are They???
- From: Stefan Jon Silverman <sjs@xxxxxxxxxx>
- Date: Wed, 01 Feb 2012 23:28:16 -0800
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font size="-1"><font face="Arial">Folks:<br>
<br>
An interesting subject that I have never seen
discussed here
but one I want to put on the table....<br>
<br>
Apparently Xat (as a chat embed) has so many holes
in it
that a brick of Swiss cheese would be jealous..a room I have
there on one of my websites ended up w/ Superman sheets
wallpaper when I clicked on a chatters "house" icon from my room
owners account and also managed to change my management password
denying me access to those capabilities until I reset (my cookie
functions from w/in chat box remained active)...<br>
<br>
There is a cute vid demonstrating how to take over a
chat
room at --> <a
href="http://www.youtube.com/watch?v=wHcRLolT7Z8";>http://www.youtube.com/watch?v=wHcRLolT7Z8</a><br>
<br>
I have also found similar ills in other chat embeds
like
Chatango, etc....<br>
<br>
Talk among yourselves now....<br>
</font></font>
<div class="moz-signature">-- <br>
<title>Message</title>
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta content="MSHTML 6.00.2900.2668" name="GENERATOR">
<div> </div>
<div> </div>
<div>
<div align="left">
<div align="left"><font face="Arial" size="2">Regards,</font></div>
<div align="left"><font face="Arial" size="2">Stefan</font></div>
<div align="left"> </div>
<div align="left"><font face="Arial"
size="2">**************************************************************************<br>
<span
class="406481714-22042004"> </span> <a
href="http://www.sjsinc.com/cgi-bin/DoRedirect?sig-google";><strong>Stefan
Jon Silverman</strong></a> - Founder / President<br>
<span
class="406481714-22042004">
</span> <span
class="406481714-22042004"> </span>SJS Associates,
N.A., Inc.<br>
<span
class="406481714-22042004"> </span> A
Technology Strategy Consultancy</font></div>
<div align="left"><font face="Arial"
size="2">**************************************************************************<br>
</font><span class="406481714-22042004"><font face="Arial"><font
size="2"><span class="266234215-06082004">Cell
</span><strong>917
929 1668</strong><span
class="266234215-06082004">
<span
class="406481714-22042004"><span
class="406481714-22042004"></span><a
href="mailto:sjs@xxxxxxxxxx";><strong>sjs@xxxxxxxxxx</strong></a>
eMail</span></span></font></font></span></div>
<div align="left"><span class="406481714-22042004"><span
class="266234215-06082004"><font face="Arial"
size="2"> <span
class="146163119-06072005">
</span> </font><span
class="406481714-22042004"><font face="Arial" size="2">
</font><a href="http://www.sjsinc.com/?%20eMail%20Sig";><font
face="Arial"
size="2"><strong>www.sjsinc.com</strong></font></a><font
face="Arial" size="2"> </font><span
class="406481714-22042004"><br>
</span><font face="Arial"
size="2">**************************************************************************
</font></span></span></span></div>
<div align="left"><span class="406481714-22042004"><span
class="266234215-06082004"><span
class="406481714-22042004"><font face="Arial" size="2">Aim:
<font color="#0000ff"><strong>LazloInSF</strong></font><span
class="739403617-04042003"> <span
class="266234215-06082004"> <span
class="535065215-06082004">
</span></span></span>Msn:
<font color="#0000ff"><strong>LazloInSF</strong></font><span
class="739403617-04042003"> <span
class="406481714-22042004"> <span
class="535065215-06082004">
</span></span></span>Y<span
class="535065215-06082004">a</span><span
class="535065215-06082004">hoo</span>: </font><font
face="Arial"><font size="2"><font
color="#0000ff"><strong>sjs_sf</strong><br>
</font>**************************************************************************
<br>
Weebles
wobble but they don't fall
down!!!! <br>
**************************************************************************
<!--TMP-LFT <BR><IMG
SRC="http://www.sjsinc.com/cgi-bin/1pix-img?XXXSigToken"; BORDER=0 HEIGHT=0
WIDTH=0 > <BR> TMP-RT--><!-- --><br>
</font></font></span></span></span></div>
</div>
</div>
<div> </div>
</div>
</body>
</html>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/