Open-script or UserScripts are NOT SAFE for use.


	Open-script or UserScripts are NOT SAFE for use.

dkCreAtto

9-10-2007 10:19 AM

302 views

tags:

security, firefox, privacy, malicious, hacking, cracking, greasmonkey

dkCreAtto says:

Are you using Greasmonkey extension for Firefox?

Then BE VERY CAREFUL in choosing script to be installed in your computer.

Add a Comment

Login to Comment. Not a member yet? Sign up

Today's Top Clips

visit the Top Clips page

View the Top Clips from September 10, 2007

Embed This Clip In Your Site...

<div style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;"><div class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color:#cc0000;"><div style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;" ><a href="http://clipmarks.com/clip-to-blog/" title="see clips that are hot right now"><img src="http://content.clipmarks.com/blog_embed/9e9d679e-f7dd-4c7a-9edb-1be913787bfc/CD28031F-40FE-4E03-B2B8-160EF0BB3B23/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://userscripts.org/forums/3/topics/704" href="http://userscripts.org/forums/3/topics/704" style="font-size: 11px;">userscripts.org</a></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://userscripts.org/forums/3/topics/704"><div align="center"><img src="http://content7.clipmarks.com/blog_cache/userscripts.org/img/EDBA1B6D-29EF-4A02-AB23-4725F0119FDB" alt="Userscripts.org" /></div></blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://userscripts.org/forums/3/topics/704"><P class="notice error"><B>A malicious user is uploading scripts that steal cookies.</B><BR />Extra caution is recommended when installing recently uploaded/updated scripts (<A href="http://userscripts.org/forums/3/topics/704" linkindex="5" set="yes">read more</A>)</P></blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://userscripts.org/forums/3/topics/704"><P>Someone has been attempting to post scripts that steal cookies.  Thanks to several alert us.o citizens (including davey, descriptor, loucypher, joel h, pogue) we have been able to note that the script is malicious and then delete them.  </P></blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://userscripts.org/forums/3/topics/704"><P>I'm putting up a banner to warn people that newly uploaded/updated scripts should be put under extra scrutiny. </P></blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://userscripts.org/forums/3/topics/704"><P>I've also decreased the cache duration of rss feeds to 10 minutes, so if you keep an eye on <A href="http://userscripts.org/feeds/recent_scripts" linkindex="14" set="yes">http://userscripts.org/feeds/recent_scripts</A> it will be a lot fresher than normal (it was cached for an hour)</P></blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://userscripts.org/forums/3/topics/704"><P>This user modified any scripts at USO and added malicious code so we can't tell you exactly which script. But you can check every script that you have installed and search for these codes:</P></blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://userscripts.org/forums/3/topics/704"><PRE>.php?cookie=</PRE></blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://userscripts.org/forums/3/topics/704"><PRE>encodeURIComponent(document.cookie)</PRE></blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://userscripts.org/forums/3/topics/704"><P>If you found the codes above in your installed scripts, uninstall them.</P></blockquote></div><div style="margin: 0px 6px 6px 4px;"><table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%"><tr><td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td><td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/CD28031F-40FE-4E03-B2B8-160EF0BB3B23/blog/" title="blog or email this clip"><img src="http://content8.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td></tr></table></div></div>

New from the makers of Clipmarks: Amplify.com - Don't just share the news...Amplify it!

Clipmarks: Home; New Clips; Top Clips; Dashboard

Popular Topics: News; Life; Science; Technology; Entertainment

Get Started: Sign Up; Install Clipping Tool; How Clipping Works; Clip-to-Blog™; ClipSearch

Tools and Resources: FAQ; ClipWeek; Top Clippers; Top Tags; Site Map

About Clipmarks: About Us; Contact; Copyright; Privacy; EULA

Search Options

Today's Top Clips