Subject: Yikes...
Author:
Posted on: 2018-10-25 18:09:00 UTC
Thanks for the heads up, please keep us posted on updates.
Is this a recent thing? Does it matter if you go I to your own account/settings page? Will it still happen on mobile devices?
...This kind of thing is not good for my paranoia.
Per this Reddit post (which got linked in the chat) and this followup, someone has found a way to inject Javascript into user profiles. Viewing an infected user profile will infect your profile with the code and probably delete some stuff/redirect you somewhere/who knows at this point?.
- Tomash
...That's my job. Thanks for the heads up.
Thanks for the heads up, please keep us posted on updates.
Is this a recent thing? Does it matter if you go I to your own account/settings page? Will it still happen on mobile devices?
...This kind of thing is not good for my paranoia.
I've finally gone ahead and kicked the FRN bucket with this, to be honest. Which is to say, done withmy FFN profile, though it'll still be a good place for badfic hunting as long as the JS exploit stays on profiles.
*FFN
I think I need a beta for posts. (And I'm only half-joking.)