Reports coming from Thenextweb indicate that YouTube was compromised earlier today, this time the attacker or attackers were targeting Justin Bieber videos. This isn"t the first time users on the Internet have teamed up and picked on Justin Bieber.
The simple exploit on YouTube has caused annoying popups and in some cases redirected users off of the website and to explicit websites like “One Man, One Jar.” Users were also posting messages claiming that Justin Bieber has died.
Users were using malformed HTML to get past YouTube HTML security checks in the comment section. Some people report seeing users leaving comments using the marquee tag and JavaScript alert function to cause popups.
Users from the infamous website 4chan are claiming responsibility for the attacks, posting messages like, “Today is a reminder that we can still shake the foundation of the Internet.”
YouTube has since blocked and patched the exploit, in this message sent from Google:
”We took swift action to fix a cross-site scripting (XSS) vulnerability on youtube.com that was discovered several hours ago. Comments were temporarily hidden by default within an hour, and we released a complete fix for the issue in about two hours. We"re continuing to study the vulnerability to help prevent similar issues in the future.”