Has anyone seen this announcement?

[zzGoWR]

It is talking about a new login... I think this could be XSS exploitable...

url is
Heads Up: New Login Screen | Forum | Gaia Online

[~Shieru No Tamashi~]

This made me xD

But remember: beautiful as this new screen is, you should always check your address bar before logging in. If it doesn't say "http://www.gaiaonline.com/," don't put in your password! We know it's tempting to trust addresses like "http://gaiahack.virus.biz.ru.exe," but fake login screens are a common phishing tactic, so stay frosty out there, soldiers.

[Souleater]

And yet all that is really needed is to get the coding for the new header and bam, no difference. Like we we don't think of this shit when they put it out.

[Ego]

Yeah, I saw that and I laughed my ass off.
Thanks, Gaia!

[The_Theomorphic_Librarian]

They're merely trying to act as if they're doing anything to prevent it, but fact is, there's little they can do.

People are probably being scammed as of this very moment :/

[Hater]

They're merely trying to act as if they're doing anything to prevent it, but fact is, there's little they can do.

People are probably being scammed as of this very moment :/

Duhhh .

[kyo1234]

WOWOWOWWWOOOWWOW is all I have to say

[Nova]

>XSS exploitable vulnerable.

I LOL'd.

Security Override - Articles: The Complete Guide to XSS

The only difference in the login screen is that it's only a log in with nothing else; nowhere did they add a place that outputs your input, let alone one that isn't filtered.

[The_Theomorphic_Librarian]

>XSS exploitable vulnerable.
The only difference in the login screen is that it's only a log in with nothing else; nowhere did they add a place that outputs your input, let alone one that isn't filtered.

This reminds me of the days of SQL Injection 'n messing about with Javascript...

You haven't been on HTS, now have you?

[Nova]

This reminds me of the days of SQL Injection 'n messing about with Javascript...

You haven't been on HTS, now have you?

No idea what HTS is...

[The_Theomorphic_Librarian]

No idea what HTS is...

HackThisSite

Google it.

[zzGoWR]

Ahhh I seeeeeee, thanks for all the replies guys.

I just assumed it would be a flash login like zOMG or something, but its not lolol.