3 ms·
Woah this looks like an old school XSS worm https://meta.wikimedia.org/wiki/Special:RecentChanges?hidebots=1&translations=filter&hidecategorization=1&hideWikiba
by varun_ch 8mo ago
Woah this looks like an old school XSS worm https://meta.wikimedia.org/wiki/Special:RecentChanges?hidebots=1&translations=filter&hidecategorization=1&hideWikibase=1&limit=100&days=30&safemode=1&urlversion=2 https://meta.wikimedia.org/wiki/Special:RecentChanges?hidebo...
I’ve always thought the fact that MediaWiki sometimes lets editors embed JavaScript could be dangerous.
- varun_ch 8mo agoAlso, I’m also surprised an XSS attack like hasn’t yet been actually used to harvest credentials like passwords through browser autofill[0]. It seems like the worm code/the replicated code only really attacks stuff on site. But leaking credentials (and obviously people reuse passwords across sites) could be sooo much worse. [0] https://varun.ch/posts/autofill/ https://varun.ch/posts/autofill/
- af78 8mo agoTime to add 2FA...
- stephbook 8mo agoChrome doesnt actually autofill before you interact. It only displays what it would fill in at the same location visually.
- varun_ch 8mo agobut any interaction is good for Chrome, like dismissing a cookie banner
- hrmtst93837 8mo ago[flagged]