Twitter lit up with complaints about the problem, Google support got some concerned posts on its forum, and we received tips in our inbox. The event caused quite a Sunday-morning stir.
The bug allowed users to inject HTML (the code that most websites are built with) that could be executed on the site, whereas HTML within comments is supposed to be restricted. The hackers did everything from force pop-up messages to appear over the site declaring that it had been hacked to redirecting Bieber video pages to sites hosting pornography and malware.
Google disabled comments within an hour of the start of the attack, then corrected the exploited bug within two hours, according to a statement sent to The Next Web.
Internet community 4chan has been
waging a small cultural war against Justin Bieber, and its members
exploited the bug to target the artist’s videos specifically. Last
week they conspired to try and send Bieber to North Korea.
Questa community (4Chain) ha sfruttato una falla (XSS) nel sistema di pubblicazione dei commenti su Youtube ed è riuscita a iniettare codice HTML che ha permesso di inserire link a siti contenenti malware o codice corrotto