Has anyone seen this announcement?

It is talking about a new login... I think this could be XSS exploitable...

url is
Heads Up: New Login Screen | Forum | Gaia Online

:D

This made me xD

Quote:

---

Originally Posted by Gaia says:

But remember: beautiful as this new screen is, you should always check your address bar before logging in. If it doesn't say "http://www.gaiaonline.com/," don't put in your password! We know it's tempting to trust addresses like "http://gaiahack.virus.biz.ru.exe," but fake login screens are a common phishing tactic, so stay frosty out there, soldiers.

---

And yet all that is really needed is to get the coding for the new header and bam, no difference. Like we we don't think of this shit when they put it out.

Yeah, I saw that and I laughed my ass off.
Thanks, Gaia! :)

What is with gaia these days ....?

They're merely trying to act as if they're doing anything to prevent it, but fact is, there's little they can do.

People are probably being scammed as of this very moment :/

Quote:

---

Originally Posted by The_Theomorphic_Librarian

They're merely trying to act as if they're doing anything to prevent it, but fact is, there's little they can do.

People are probably being scammed as of this very moment :/

---

Duhhh .

WOWOWOWWWOOOWWOW is all I have to say

>XSS exploitable vulnerable.

I LOL'd.

Security Override - Articles: The Complete Guide to XSS

The only difference in the login screen is that it's only a log in with nothing else; nowhere did they add a place that outputs your input, let alone one that isn't filtered.

Quote:

---

Originally Posted by Nova

>XSS exploitable vulnerable.
The only difference in the login screen is that it's only a log in with nothing else; nowhere did they add a place that outputs your input, let alone one that isn't filtered.

---

This reminds me of the days of SQL Injection 'n messing about with Javascript...

You haven't been on HTS, now have you?

Quote:

---

Originally Posted by The_Theomorphic_Librarian

This reminds me of the days of SQL Injection 'n messing about with Javascript...

You haven't been on HTS, now have you?

---

No idea what HTS is...

Quote:

---

Originally Posted by Nova

No idea what HTS is...

---

HackThisSite

Google it.

Ahhh I seeeeeee, thanks for all the replies guys.

I just assumed it would be a flash login like zOMG or something, but its not lolol.