YouTube has been hacked!!

It seems that many popular YouTube videos have been injected with html scripts. I thought YouTube blocked that stuff! ive even seen a video which goes to the infamous 'meatspin' website. no doubt 4chan or ebaumsworld is behind all of thischeck out the video of 'chocolate rain'
http://www.youtube.com/watch?v=EwTZ2xpQwpAor 'party in the usa'
http://www.youtube.com/watch?v=M11SvDtPBhAAdmin edit: You should log out of your youtube account until this is over.

No. It has not been hacked. This is a html/javascript injection, it can be quite dangerous but is *not* hacking, there are no user credentials a leaked or anything of the sort. It is a text comment posted which gets injected into the page.Saying youtube is hacked is extremely fail and just shows you have no idea what hacking is.

Replying to #2

Goodness me. That is quite scary.I never knew about this until now. Will it be safe to view those videos?

i think its safe, its mostly only the most popular videos that have the html injection

WoW... I just tried to view Doctor Ashen's video. and it brought me to a picture of a naked guy with *cut out due to crazy gore*

still fail on youtube's part for not preventing it.

I was just about to post this when I watched an angry video game nerd episode! except it was a one man one jar video redirection.

I heard that there aren't any sort of Moderators moderating the website at all.

Replying to #8

There are, who else removes the bad vids of people doing illegal stuff...takes ages though for action to happen once flagged.

Replying to #9

I see..I'll avoid youtube for now.But why isn't the main-page hacked?

Replying to #10

some of my videos aren't hacked. or at least they are and I'm too scared to check

Stanley Richards · #10But why isn't the main-page hacked?

Did you not read what I posted at all? This is NOT hacking, it is a comment posted on the video as I wrote, there are no video comments on the main page so obviously the front page cannot become vandalized.

lugia543 · #11some of my videos aren't hacked. or at least they are and I'm too scared to check

The people are only targeting popular vids.

Replying to #12

Sorry. Was typing too fast. I meant injected.

There are still no comments on the front page so there are no vectors to use to inject the code.Also, to expand on my "can be dangerous", it can be used to capture your session information, which means you should logout from youtube so your session will be destroyed and re-generated.

Replying to #14

Logged out as in Logged out from my Youtube account? I was never logged in.

i found the forum that is responsible. it's 4chan obviously.
http://boards.4chan.org/v/res/65511385
if it is against the rules to post 4chan links please don't hesitate to remove but well.. THIS IS THE SOURCE!!!!!

Replying to #16

I don't think 4chan was the source, it just spread there really fast, and they're mostly doing malicious password scraping. I cannot say who discovered it, some people suggest ebaumsworld but that seems equally unlikely.

Replying to #17

who could it be. somebody gotta fix this soon

I am browsing the video's in the first post and the security mode is active..."Reacties op deze video zijn verborgen door de veiligheidsmodus."
"Comments on this video are hidden by the security mode." (translated)I think Google or YouTube is aware of this problem...
Post Merge: [time]1278253467[/time]
But when viewing the comments YouTube acts weird...

yeps. hope youtube can counter-attack this attack. it's just a script prank. hopefully youtube can disable script comments and this would never happen again