Skip to main content

Breaking News : YAHOO has just released a security patch that prevents a serious bug which allowed hackers to read any email

Breaking News : YAHOO has just released a security patch that prevents a serious bug which allowed hackers to read any email

Yahoo has just issued a security patch of a highly critical XSS (cross-site scripting) security vulnerability in its users’ email system that allowed hackers to read any email contents.

Who discovered this security flaw ?

Jouko Pynnonen, a famous cyber-security researcher lived in Finland first discovered this serious issue and reported it to Yahoo. Jouko Pynnonen also reported a serious bug in Yahoo last year that allowed hackers to hack any user’s account by using XSS (cross-site scripting) vulnerability. He was also awarded in $10,000 by Yahoo’s bug bounty program on Hackerone.

How does this bug work ?

Jouko Pynnonen has posted an article on his personal blog about how the bug works. He said that the bug existed in the email’s HTML filtering.
Jouko sent an email with various sorts of attachments to inspect the raw code in HTML (Hyper Text Markup Language) of that email. However, Yahoo has a protection to block malicious codes of these type HTML emails in its filtration process.
But, Jouko had succeeded to bypass this filtration process by sending a YouTube link in that email which allowed him to execute a JavaScript code. After executing this malicious JavaScript he was able to read victim’s email finally.
According to his statement :
“As long as the URL pointed to a white-listed website such as YouTube, it was not further sanity checked or encoded,” writes Pynnonen.

I’m still a Yahoo user. What can I do now to get rid off ?

Do not scare …. Yahoo has already fixed this poisonous flaw.

Sources for the news and further reading


Tags : Bugs, Hacks, News, Security, Software, Yahoo, 

This Post Was Published On My Steemit Blog. Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit 



$3 Donation [Fixed]

$Any Amount





Comments

Popular Posts (Last 7 Days)

One Black & White Photograph Daily for 30 days - Day #25

green yard - behind of my village home Camera : Xiaomi Model : 2014818 Location : Bongaon, West Bengal, India Snap Taken : 14 March 2016 Tags : Black & White Photography, Flowers & Plants photography, Landscape photography, Nature, Photography,  This Post Was Published On My Steemit Blog . Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit  $3 Donation [Fixed] Donate $Any Amount

Earn Bitcoin by playing free fun games (non gambling)

To earn bitcoin by playing free games is very exciting. Here I give a list of all games I searched on Google. 1.  SatoshiQuiz  :SatoshiQuiz is a quiz website where users win bitcoin for correctly answering questions from various categories.. You can earn 100 to 1000 satoshi per winning quiz.  Try the new android app and get 5000 satoshis.  Download   Min withdrawal amount is 11000 satoshis & Processed once every week on Sunday.1000 satoshi fees deducted per withdrawal to prevent abuse. Premium account fees is 100000 satoshis per month.   2.  Bitcoin Riddles  :Solve riddles presented in YouTube videos and if you are the first to get the correct answer you win a prize in BTC! Minimum withdrawal is 100 bits. After signup you will get free 10 bits.  3.  Sparkprofit  : Spark Profit aims to be the world's most rewarding app! It teaches you how to profitably trade on the financial markets, and pays you cash rewards when you do well. Platform : Windows, Mac, Android &

Holi - [An Original Abstract Art] - #21

Here I share my latest work on Abstract Art “Holi ” – [ Series #21] “Holi” is the festival of color, festival of sharing love Tags : Abstract, Art, Drawing, Painting,  This Post Was Published On My Steemit Blog . Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit  $3 Donation [Fixed] Donate $Any Amount

Untitled 3

Tags : Life, Photography, Flood, This Post Was Published On My Steemit Blog . Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit  $3 Donation [Fixed] Donate $Any Amount

The Real Face Of India - Episode 72

The Real Face Of India - Episode#72 I believe that India is the most beautiful country in the world. In this series I show the real face of beautiful India. Half Dozen Photos of Natural Beauties Snap taken : 28 Aug 2017   Camera : SONY, Model : DSC-W710 Other Episodes :  Episode#01 ,  Episode#02 ,  Episode#03 ,  Episode#04 ,  Episode#05 ,  Episode#06 ,  Episode#07 ,  Episode#08 ,  Episode#09 ,  Episode#10 ,  Episode#11 ,  Episode#12 ,  Episode#13 ,  Episode#14 ,  Episode#15 ,  Episode#16 ,  Episode#17 ,  Episode#18 ,  Episode#19 ,  Episode#20 ,  Episode#21 ,  Episode#22 ,  Episode#23 ,  Episode#24 ,  Episode#25 ,  Episode#26 ,  Episode#27 ,  Episode#28 ,  Episode#29 ,  Episode#30 ,  Episode#31 ,  Episode#32 ,  Episode#33 ,  Episode#34 ,  Episode#35 , Episode#36 ,  Episode#37 ,  Episode#38 ,  Episode#39 ,  Episode#40 ,  Episode#41 ,  Episode#42 ,  Episode#43 ,  Episode#44 ,  Episode#45 ,  Episode#46 ,  Episode#47 ,  Episode#48 ,  Episode#49 ,  Episode#50 ,  Episo

mathematics behind chess

Is there any relationship between supposing numerically and supposing in the round of Chess? At the end of the day, should a man having a dynamic personality in Mathematics turned out to be essentially a decent Chess player have aptitudes in Mathematics?  It is important to call attention to that because of the subject intricacy, our endeavors will be to clarify essential attributes of both  Science and Chess which have been postured by surely understood Mathematicians and Chess players. In like manner, we are not keen on uncovering truths, for instance, from the Theory of Knowledge, Psychology, Epistemology or going further into the specialized and complex parts of Chess.  In the first place, let us analyze a few characteristics of Mathernatics.  Individuals having poor involvement in Mathematics trust that knowing how to include, subtract, increase or separation empowers them to say that they could ace Mathematics. Others having some aptitude in performing fa

Tested: We Buy a Bitcoin!

Tags :   Bitcoin, Cryptocurrency, Video, Youtube, Money This Post Was Published On My Steemit Blog .  Earned : $00.00 SBD Converted to USD @0.9595$ Rate = $00.00 USD .  First Time heard about Steemit ? Click Here To Know...

Death [An Original Abstract Art]

death Tags : Abstract, Art, Drawing, Painting,  This Post Was Published On My Steemit Blog . Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit  $3 Donation [Fixed] Donate $Any Amount

Before A Heavy Rainfall

I clicked at the exact time ; after about 5 minutes rain started Location : Dakshineswar, Kolkata Snap taken : 02 August 2016 Camera : Xiaomi ; model - 2014818 Tags : Photography, Nature, Landscape photography, Flowers & Plants photography, Sky,  This Post Was Published On My Steemit Blog . Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit  $3 Donation [Fixed] Donate $Any Amount

Stereogram Contest [Winner will be rewarded 50% revenue of this post]

what do you see in this stereogram ? Write down in the comment box.  The first one who recognize correctly will win the 50% of revenue of this post. For example , if I get $10 from votes on this post, then I'll award $5 to the winner. Tags : Funny, Images, Stereogram, Contest,  This Post Was Published On My Steemit Blog . Please, navigate to steemit and cast a free upvote to help me if you like my post. First Time heard about Steemit ? Click Here To Know Everything About Steemit  $3 Donation [Fixed] Donate $Any Amount
Back to Top