Title: A Hack We Can Believe In - Obama Site Redirected to Hillary's
Post by: don on April 22, 2008, 12:17:40 PM

Now this is politics at its best.

From Larry Seltzer's Blog on PC Mag:

Quote

Hackers redirected portions of the BarackObama.com web site to HillaryClinton.com (http://news.netcraft.com/archives/2008/04/21/hacker_redirects_barack_obamas_site_to_hillaryclintoncom.html), according to several reports.

It's amazing more of this sort of thing hasn't happened already, especially since web-based donations are more important than ever to the campaigns. Four years ago Security Watch reported on a phishing e-mail that asked for donations to the John Kerry campaign.

The Obama hack used a cross-site scripting flaw in the site to redirect users from Obama's Community Blogs section to HillaryClinton.com. XSS bugs are getting far more attention lately than they had been in the past, perhaps because they are so widespread. And since the answer to them is good programming practices rather than running some security product, they can be difficult to snuff out.

Original story:
http://blogs.pcmag.com/securitywatch/2008/04/a_hack_we_can_believe_in.php

Don

Title: Re: A Hack We Can Believe In - Obama Site Redirected to Hillary's
Post by: vijay2 on April 22, 2008, 12:39:05 PM

Wow Don !!!

Thanks man, the timing couldn't be better. I am meeting a developer to explain to him XSS and now i can just send him the link :))

vj

Title: Re: A Hack We Can Believe In - Obama Site Redirected to Hillary's
Post by: Manu Zacharia (-M-) on April 22, 2008, 12:47:56 PM

And here comes the You Tube Video for the same "hack"

http://youtube.com/watch?v=NKjomr1Afq0

Title: Re: A Hack We Can Believe In - Obama Site Redirected to Hillary's
Post by: iSmith on April 22, 2008, 04:22:43 PM

>:( this is an insult.

Title: Re: A Hack We Can Believe In - Obama Site Redirected to Hillary's
Post by: Mr. Roboto on April 22, 2008, 06:47:12 PM

Just when I thought the campaign was about to get dull!

Title: Re: A Hack We Can Believe In - Obama Site Redirected to Hillary's
Post by: RoleReversal on April 23, 2008, 03:27:05 AM

Quote from: Mr. Roboto on April 22, 2008, 06:47:12 PM

Just when I thought the campaign was about to get dull!

And I thought politics were boring :D

Think I'll save the link for the next time a suit decides security does provide a good ROI. Thanks Don

Ethical Hacker Community Forums

Resources => News from the Outside World => Topic started by: don on April 22, 2008, 12:17:40 PM