We are all aware of the spam-bots that infest our systems via comment and trackback spam. For the most part, whatever software used, it can be defeated through various hacks, plugins, and htaccess tricks.
I have a question for you. How many blogs do you visit that include enhancements to their sites with features such as music? Any feature that requires JavaScript and ActiveX is suspect.
Let the Blogger beware, I warned you, with the help of ZDNet:
The problem involves the use of JavaScript and ActiveX, two common methods used to launch programs on a Web page. Security experts said malicious programmers can use JavaScript and ActiveX to automatically deliver spyware from a blog to people who visit the site with a vulnerable Web browser.
Spyware tools also have been hidden inside JavaScript programs that are offered freely on the Web for bloggers to enhance their sites with features such as music. As a result, bloggers who use infected tools could unwittingly turn their sites into a delivery platform for spyware.
Evil bastards aren’t they? Just
another reason to avoid blogs that contain “music” for my pleasure. Not that I ever intentionally visited any, or searched for them either. With thousands of dollars I have invested in CD’s what’s the point? To have some knucklehead offer me
his/her choice in music? Thanks, but no thanks!
Get your “shocked” antidote at the ready. The IE browser is the most vulnerable to be infected, and Google’s Blogger in none to safe either:
The problem only affects Web surfers using Microsoft’s Internet Explorer who fail to choose the highest IE browser security settings, security experts said.
The blog vulnerability has cropped up most visibly in Google’s Blogger, the most widely used blog-publishing tool. But it could affect other services as well.
Visitors to Blogger’s Blogspot.com network have complained that they were exposed to infected sites when they used the “Next Blog” link. The feature was designed to help people discover new journals and takes Web surfers to a random Blogspot site.
OK, so you weren’t shocked and saved your “antidote” for another day. Here’s my advice, go
here and get the hell off
IE. After completing that task go
here and get a better blogging system.
UPDATE: The 2nd Annual Workshop on the Weblogging Ecosystem: Aggregation, Analysis and Dynamics, will be held in Chiba Japan [A prefecture near Tokyo] in May. Guest speakers include Ethan Zuckerman, Eytan Adar, Natalie Glance and Matthew Hurst co-creaters of BlogPulse. Among the many topics to be covered are “applications built on top of blog data” and “Alternative blog forms (podcasting, moblogging, photoblogs, etc.).” Both topics should address the current JavaScript and ActiveX problems.
Cross posted within the Cranial Cavity
The ones on blogspot really are anonymous (though I suppose blogger could track them by the IP used to sign into an account – if the blogger wasn’t using a proxy). What can they do about those? Sue blogger.com? They’d get laughed out of the US.
Comment by Kathy K — 16 Mar, 2005 @ 14:13
Yeah, this is yet another reason why American hosts are laughing to the bank. Oh yeah Kathy expect a few people to get in touch about your wonderful hosting services
Comment by Andrew Ian Dodge — 17 Mar, 2005 @ 05:27
I am a US citizen posting nicknonymously about US politics on a domain registered out of the island of Nauru, but upon a server which happens to be physically located in Australia. Does this law apply to me, and if so, how to they propose to enforce it?
Comment by triticale — 20 Mar, 2005 @ 19:05