Question about Samy Worm and who it would affect

[gev_d]

Hello All,
I'm doing alil preliminary research on the Samy Worm that took
myspace by storm a couple of years ago. What im unclear about is,
was the exploit solely the fault of the myspace web developers? Or
to put it another way, was it browser and OS independent? Upon
viewing the infected page,would a Opera user or a firefox user's
browser have behaved the same way as IE and infected the viewers
profile the same way?


Any thoughts or clarifications would greatly be appreciated

Giovanni

 

[idbeholda]

Hello All,
I'm doing alil preliminary research on the Samy Worm that took
myspace by storm a couple of years ago. What im unclear about is,
was the exploit solely the fault of the myspace web developers? Or
to put it another way, was it browser and OS independent? Upon
viewing the infected page,would a Opera user or a firefox user's
browser have behaved the same way as IE and infected the viewers
profile the same way?

Any thoughts or clarifications would greatly be appreciated

Giovanni

Essentially it was a little bit of both. Shame on myspace for not
making secure code (they still don't... lawl), and IE for being the so-
called "enabler".

http://www.betanews.com/article/CrossSite_Scripting_Worm_Hits_MySpace/1129232391

 

[idbeholda]

Also, here is an in-depth analysis of the code in question by the
author himself.

http://namb.la/popular/tech.html

Hopefully, that will help you some more.