Weibo hack attack highlights holes

0 Comment(s)Print E-mail Global Times, July 7, 2011
Adjust font size:

The suspect allegedly behind the widespread distribution of a virus on Sina Weibo has been arrested, according to the Beijing Times on Wednesday, but concerns remain over the security of China's hugely popular microblogging services.

Neither Sina's publicity department nor the Municipal Public Security Bureau would confirm the arrest of the person whose alleged virus infected more than 30,000 Weibo users, including official Sina microblogs, between 8:20 and 9:25 pm on June 28, according to the Legal Mirror.

During the attack, users received private messages titled "income tax exemption threshold is expected to be raised to 4,000 yuan (US$618)," or "sex photos of celebrity actress Fan Bingbing," with a link. If one clicked the links, their accounts automatically posted the same entry repeatedly.

A vulnerability in Weibo's system was exploited to generate the links, but the problem was fixed by 9 pm on June 28, according to an official Sina announcement, and the viral data was removed by 9:25 pm. The passwords and personal information of users were not affected, the announcement said.

Some Weibo users traced the virus back to an account named "hellosamy," which is already non-accessible on Weibo, the Legal Mirror report said.

"The case is under investigation, and we are working on enhanced measures to ensure Weibo safety," an anonymous publicity employee with Weibo told the Global Times on Wednesday.

The cross-site scripting (XSS) hole that made Weibo vulnerable is an ordinary one to which any website is at risk, according to Qihoo 360 Technology Co Ltd, one of China's major Internet companies.

"Although the Weibo virus was just a hacker trick, the implied microblog safety issue should not be neglected," an anonymous 360 publicity representative told the Global Times via e-mail on Wednesday. More Internet safety threats will be spread by microblog, 360's safety center predicts, and traditional anti-virus software is not safe enough, according to the representative.

They have already launched a new "microblog safeguard," the representative said.

Other Chinese microblogs, though not affected by the virus, told the Global Times they will continue to improve safety.

"We have firewalls and certain restrictions to make sure that hackers don't make it in that easily," said a media executive with Sohu's microblogging service surnamed Liu.

"Bugs are normal. What we do is to fix them as soon as we can," he told the Global Times.

Still, China's microblog operators lack adequate safety awareness and need to improve their ability to deal with virus attacks, according to Wei Wuhui, a teacher with Shanghai Jiaotong University and an Internet and new media expert.

"Sina did okay," he said, "but I myself still got some private spam messages until 11 pm or midnight that day, which means there is still some residual spam data."

The "I don't care about privacy invasion" thinking of Chinese Web users has resulted in lax safety protection, Wei said.

He advised that microbloggers not click random links, not post private photos online and to remove all private messages once read.

Print E-mail Bookmark and Share

Go to Forum >>0 Comment(s)

No comments.

Add your comments...

  • User Name Required
  • Your Comment
  • Racist, abusive and off-topic comments may be removed by the moderator.
Send your storiesGet more from China.org.cnMobileRSSNewsletter
主站蜘蛛池模板: 91精品国产综合久久香蕉| 中文字幕日韩wm二在线看| 欧美激情另类自拍| 免费成人av电影| 美女奶口隐私免费视频网站| 国产午夜三级一区二区三| 日本人强jizz多人| 国产精品美女视视频专区| chinese18国产高清| 精品久久久久久中文字幕| 国产中文在线观看| 黄色软件app大全免费下载2023| 宅男66lu国产在线观看| 久久99九九99九九精品| 日韩a在线观看| 九色视频在线观看| 欧美aaaaa| 亚洲国产成人久久综合一| 正能量www正能量免费网站| 国产va免费高清在线观看| 高清videosgratis欧洲69| 国产真实乱系列2孕妇| www.youjizz.com在线| 日韩视频在线观看| 人妖系列精品视频在线观看| 精品国产三级a∨在线| 和黑帮老大365天完整版免费| 色综合67194| 国产精品亚洲欧美日韩一区在线| 91av最新地址| 国产老买老妇bbb| 91精品欧美一区二区综合在线| 大香网伊人久久综合网2020| igao为爱寻找刺激| 日干夜干天天干| 亚洲人成伊人成综合网久久| 欧美日韩视频在线播放| 亚洲欧美一区二区三区| 精品国产免费一区二区三区 | 国产日韩视频在线| 四虎在线最新永久免费|