Happy Atheist Forum

General => Current Events => Topic started by: Will on September 28, 2009, 03:54:47 AM

Title: Problematic Code on Reddit
Post by: Will on September 28, 2009, 03:54:47 AM
If you, like me, are a fan of reddit, you may want to hold off for a bit. It seems there's some malicious script running around that's making things difficult.

I'll keep everyone apprised.
Title: Re: Problematic Code on Reddit
Post by: Whitney on September 28, 2009, 04:00:03 AM
Thanks for letting us know.  I do use reddit fairly frequently. I won't touch it till I know more.
Title: Re: Problematic Code on Reddit
Post by: Will on September 28, 2009, 04:03:48 AM
Update: absolutely, positively disable javascript if you decide to give it a shot. It's some kind of self-propagating javascript in the inbox system. All I know from reddit is "oh crap, we're working on it, spread the warning".

Update 2: Okay, if you go to your inbox without javascript disabled, the malicious javascript automatically changes your previous few comments to spread the malicious javascript. If anyone has already visited reddit and fallen victim, please disable javascript and go delete your changed comments.
Title: Re: Problematic Code on Reddit
Post by: Whitney on September 28, 2009, 04:14:45 AM
I think I'll just wait till they fix it....not worth the risk.
Title: Re: Problematic Code on Reddit
Post by: Will on September 28, 2009, 05:43:13 AM
Just got the okay from a friend that it's safe. Tested it, and everything's fine.
Title: Re: Problematic Code on Reddit
Post by: LoneMateria on September 28, 2009, 05:43:47 AM
You guys are going to hate me but wtf is reddit?
Title: Re: Problematic Code on Reddit
Post by: Whitney on September 28, 2009, 06:37:51 AM
it's basically a social bookmarking site where you can share links but you can also make posts instead of posting a link.

Um...just look at it:  www.reddit.com (http://www.reddit.com)  It's kinda hard to describe in words.
Title: Re: Problematic Code on Reddit
Post by: LoneMateria on September 28, 2009, 06:40:29 AM
okay, I would have went to the site but Will said there was a virus on it so I elected not to.  So its basically like a version of youtube only you share something different then videos, am I understanding this right?
Title: Re: Problematic Code on Reddit
Post by: Will on September 28, 2009, 07:49:01 AM
It's not a virus, it's malicious Javascript. Javascript is a programming language people use. It communicates using a combination of letters, numbers, and symbols what your browser does and shows. This particular javascript would change your last comment to a compy of itself so that anyone that looks at your old comment would get the malicious javascript. It spread pretty quickly, but the admins and techs on reddit have it under control now.
Title: Re: Problematic Code on Reddit
Post by: LoneMateria on September 28, 2009, 03:49:25 PM
Quote from: "Will"It's not a virus, it's malicious Javascript. Javascript is a programming language people use. It communicates using a combination of letters, numbers, and symbols what your browser does and shows. This particular javascript would change your last comment to a compy of itself so that anyone that looks at your old comment would get the malicious javascript. It spread pretty quickly, but the admins and techs on reddit have it under control now.

Malicious code in any program is considered a virus.  Someone probably used a hook and injected that line of code into whatever they were using JavaScript for on that site.  (Its been a long time since I've used JavaScript, I used it back when I used HTML >.<, from what I know of ASP I think I like it more, probably because I can incorporate C# into my webpage.  But to run asp you need a windows server and most servers use Unix or Linux >.<)  Anyway glad the site is back up i'll look at it in a little bit.
Title: Re: Problematic Code on Reddit
Post by: Will on September 28, 2009, 06:47:28 PM
I always thought a virus was a malicious program, not just come script. Oh well.

The perpetrators have been sacked, and then the sackers have been sacked.
Title: Re: Problematic Code on Reddit
Post by: LoneMateria on September 29, 2009, 02:58:39 AM
Quote from: "Will"I always thought a virus was a malicious program, not just come script. Oh well.

The perpetrators have been sacked, and then the sackers have been sacked.

A virus is really just code that does something malicious.  You can break programs and insert viruses into them (Assembly languages work well for this incase you were wondering).  One of the dangers with stealing programs is that people will buy the program, crack it, and put a virus in it then distribute it free.  I remember that was bad when I used to use Kazaa and other P2P programs.  You never knew if the stolen program you get was going to screw up your computer even though it would work.  Anyway glad they caught them.  I'm gonna check out reddit in a minute ^_^