Comments on: RIAA Site Features TorrentFreak’s Latest News

By: ttyX

ttyX — Thu, 07 May 2009 14:26:15 +0000

Pwnage ;)

By: jonathan

jonathan — Thu, 07 May 2009 11:27:45 +0000

this is like coding 101, i find is sad honestly.

By: Anonymouses

Anonymouses — Wed, 06 May 2009 10:21:09 +0000

lol this shit is ironic i bet that pisses off MPAA and RIAA, they want to Rule the damn Internet Yet the Show the inability to protect the own asses from a hacking thats shit is funny as hell. An they want to stop ppl from sharing music and movies. Learn more about computers dumbasses.

By: anon

anon — Wed, 06 May 2009 01:11:38 +0000

isn’t that the same as stealing news articles from Torrent Freak?

someone should teach those bastards about copyrights

By: herbert

herbert — Tue, 05 May 2009 19:24:14 +0000

Ja, das ist meine echte email-adresse! Heute Nacht hatte ich das “Vergnügen” mit einem echten Jünger der mainstream-Presse zu kommunizieren. Das Problem, ich kenne diesen Menschen schon mein halbes Leben… Heute NAcht, wurde mir bewußt, dass Menschen, die für sich selbst denken können, in dieser Gesellschaft unerwünscht sind! Das hier ist kein Gelaber von jemanden der zu viel Zeit hat – nein, das hier ist eine Anfrage an Leute, die die Fähigkeit haben, jemanden zu folgen, der diese Gesellschaft in die Knie zwingen wird. Ich will hier keine grauen Mäuse hören – ich will Menschen, die bereit sind dieses Land, durchwachsen von Korruption, brennen zu sehen. Dieser Text ist kein Scherz, kein Spaß – dies ist die letzte Möglichkeit Freiheit zu erkämpfen! Danke.

Yes, that is my real email-address! Tonight, i had the “fortune” to meet a real believer of the mainstream-press. The problem, i knew this men half my life… Tonight, i realized, that people, who think for themselfes, are no longer accepted in this society. This is no chatter of someone with to much time on his hands – no, this is an outcry to people, who have the ability, to follow a movement, that will bring down this system to it’s knees. I don’t want to hear them grey mice complaining – i wan’t people, who whant this land, rotten with corruption, to burn. This text is no joke, no scam – this is the last opportunity to fight for freedom! Thanks.

I am sorry for my bad english – please, correct that text and copy it. Thank you!

By: Zits

Zits — Tue, 05 May 2009 17:31:20 +0000

If the RIAA is leaving their ass open to 12 year old script kiddies…this is even worse if you think about it…LOL!

By: Hackean la web de la RIAA y enlazan a las últimas noticias publicadas en TorrentFreak

Tue, 05 May 2009 10:39:57 +0000

[...] Esta vez le tocó a la gente de la RIAA que, al parecer, contrató al mismo desarrollador de webs porque tenía la misma vulnerabilidad que fue explotada para mostrar las noticias que aparecían en TorrentFreak. [...]

By: Anonymous

Anonymous — Tue, 05 May 2009 09:54:23 +0000

It certainly goes a long way to defeating the argument that simply making available is equivalent to piracy. By that argument the entire RIAA is now guilty of piracy. I think this is brilliant, just brilliant.

By: Anonymous

Anonymous — Tue, 05 May 2009 08:02:42 +0000

@logic voter: “the domain where knowledge is the ulitmate power, belongs to the pirates hackers and crackers.
fat executive d**ick’s in suits are out of their element
+1″

Way to go with the retarded comment, considering this will only show up on the clients webpage that’s using a specially crafted URL.

And the “ultimate power” ramblings, you really shouldn’t lie about your level of expertise as you get made to look stoopid like now.

As in you pwned yourself.

By: ben

ben — Tue, 05 May 2009 07:25:04 +0000

@35

i agree…

it doesn’t show up on anyone else’s machine but your own when you do this. i wouldn’t fix it.

By: Vektor

Vektor — Tue, 05 May 2009 06:48:26 +0000

@13: Almost everyone who posts news is verifying them and, as post 32 says, no harm is done to their website. If this is illegal, so is google. Nowhere on their website says that you’re not allowed to use their search function to search for specific things. The things you can enter in their search box you can also enter in google’s search box. Append “site:riaa.com” and you have a search function for their website. The difference here is, google shows search results while riaa.com’s search… well… you know…
@26: You’re right, it’s not an attack. It’s just bad programming. And this post is about bad programming, not about hacking. These bugs are very easy to fix and it’s very easy to find them.

BTW I found another XSS in all MPAA’s movie rating sites. While RIAA was filtering keywords in their search box (using a case-sensitive search), here is no verification at all.
This bug can be used to get fake ratings for a movie or to get ratings for a movie that is not in their database or that doesn’t even exist.
Example for TorrentFreak TV episode 10: http://img209.imageshack.us/img209/6150/ratings1.gif . You wouldn’t download a car.

By: Superior

Superior — Tue, 05 May 2009 06:11:35 +0000

Great job!!!

By: IRC: #boycottnovell @ FreeNode: May 4th, 2009 | All about MICROSOFT

IRC: #boycottnovell @ FreeNode: May 4th, 2009 | All about MICROSOFT — Tue, 05 May 2009 05:49:53 +0000

[...] again -> http://torrentfreak.com/riaa-site…; [...]

By: IRC: #boycottnovell @ FreeNode: May 4th, 2009 | All about MICROSOFT

IRC: #boycottnovell @ FreeNode: May 4th, 2009 | All about MICROSOFT — Tue, 05 May 2009 05:49:53 +0000

[...] again -> http://torrentfreak.com/riaa-site…; [...]

By: IRC: #boycottnovell @ FreeNode: May 4th, 2009 | Boycott Novell

IRC: #boycottnovell @ FreeNode: May 4th, 2009 | Boycott Novell — Tue, 05 May 2009 05:22:05 +0000

[...] again -> http://torrentfreak.com/riaa-site…; [...]

By: Cordelia

Cordelia — Tue, 05 May 2009 04:28:04 +0000

Losers! They already knew their site was vulnerable but didn’t bother to fix it.

Well done Vektor!!!

I hope many more will follow his example.

By: Calimore

Calimore — Tue, 05 May 2009 03:44:56 +0000

Oh c’mon…

I mean… props to Vektor for discovering the XSS and all but this is hardly worth any news (let alone two news in a few days).

A lot of sites are vulnerable to XSS and you have to send a specially crafted URL to the site to see something like in the screenshot.

This is not something a regular visitor will see so this probably won’t have any effect… In most cases the site admins/coders don’t even bother to fix something like this (although they probably should).

By: fleshTH

fleshTH — Tue, 05 May 2009 03:06:34 +0000

XSS is retarded. it’s not permanent (unless it’s stored somehow). now if you could give me a link and i can view exactly what that images displays without doing anything extra. then it’s worth something.

By: Hacker/pirates of the world UNITE

Hacker/pirates of the world UNITE — Tue, 05 May 2009 02:44:46 +0000

awww but the last hack was a lot more inventive and you people didn’t write about it. an actual exploit that wacked the site to non existence for a whole day.

poor babies cant stop a outdated html flaw.

By: my 2 cent car crash.

my 2 cent car crash. — Tue, 05 May 2009 02:04:52 +0000

How about gay porn x-linked there?
And/or cock pics