Youtube exploits! Stay off Youtube!

There's an HTML/XSS injection exploit in the Youtube comment system - it's being used for launching shock site popups and worse. Stay off Youtube if you're not running a locked-down Firefox install, and if you are, remove youtube.com from your NoScript whitelist until the problem's resolved.

http://news.slashdot.org/story/10/07/04/1530234/YouTube-Hit-By-HTML-Injection-Vulnerability?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29

Edit: Worst of all a 4chan user is claiming to have found a way to dupe youtube login cookies. Power users, delete your youtube cookies and don't log into Youtube. If your YouTube and Google accounts are linked, you should probably just stay off youtube for safety.

It appears they fixed the problem within a couple hours: http://news.cnet.com/8301-1023_3-20009660-93.html

edit: I've always wondered who those people were who actually log in and submit comments to the videos.

stuart in mn wrote: edit: I've always wondered who those people were who actually log in and submit comments to the videos.

Well, I have a YouTube "channel" of my autocross videos, as do a lot of the people I autocross with. Since we have to be logged on to upload, it's fairly easy to look at each other's videos and comment about that particular run and/or course. I don't comment on people I don't know.

Yep looks like the fix is done...but this might just be the beginning. I'm seeing reports that google/youtube linked account cookies CAN be used to break into gmail accounts.

Is there a way to unlink youtube accounts from google?

Found instructions:

SigneNoerly said: What you need to do is: 1: Log into your YouTube account 2: Click "Account" in the top right corner 3: In the left navigation pane click "manage account" 4: Click "Unlink my google account" and follow the instructions

From:

http://www.google.com/support/forum/p/youtube/thread?tid=6d48c5f5c387a6f5&hl=en

I don't see any of that on my page. It just says my screen name and "Sign Out" on the upper right hand side.

reichelmarcia said:

Is it possible to detach Google+ pages from their associated YouTube channels?

 

Is it possible that you're just a canoe floating down the river? I mean, that would be a cool youtube video, a bunch of canoes in water, maybe some kayaks and ski-doos too.

Anyone keeping a tally of the canoe way back machine?  13 years is pretty strong on that list.