Hey everyone. There seems to be a new youtube hack up which is potentially blocking everyone to not see video comments being made. I've been analyzing the hack and I can confirm that it is working. The video itself is working perfectly when run in Flash. But if you run the video using HTML5 it is not going to work.
If you see a video which has one comment saying anything similar to just "<script>" then that video has been "infected". All comments before that posts will be invisible. I will not reveal how the hack is working for several good reasons aswell as I don't want to get banned here, but I will share some technical info: I can say that the hack is disabling every previous posts under a <script> tag. And as <script> has no visual appearance, the comments will not be displayed. This is all youtube's fault and not the web browser, as it is following the HTML/XHTML standard in which script tags is not for visuals.
A link to a video (HDstarcraft) which has the hack in action:
This is tested under chrome.
EDIT: Ok apparently you can't even post a comment! :o Also I want to warn people from watching youtube videos because of potential Javascript codes being used by the "hacker". Also this leads that you can be directed to malicious sites! EDIT2: Youtube/Google is currently looking into the exploit. EDIT3: Ok they have ereased the posts which is having the text "script" which is stopping the exploit from working. Posting the text "script" will result in a empty reply.
yeah i saw it too. should we maybe report the videos or something? because it really sucks and i hate those people who do this without any purpose. they should be banned from youtube i guess.
I just saw his video and was wondering.. wtf? why would someone comment <script> hahah so what does it do exactly? it doesnt plant some kind of virus or anything.. does it?
On July 04 2010 21:04 schiznak wrote: Its no virus, its just ~30 letters of code which creates scrolling text, which additionally blocks further comments.
I'm surprised youtube hasn't come across this problem sooner
Who said it was a virus?
On July 04 2010 21:04 Tropics wrote: something on youtube that blocks you from seeing the comments?
honestly, this is one of the best things ive ever heard
Haha this is so true! :D
On July 04 2010 21:06 virusak wrote: should be moved to general, really isnt sc2 related, sure it "affect" HDs videos but not really much