Log in

No account? Create an account
No Opt In, No Ads
Fueling the resistance
Hijacking affiliate links 
4th-Mar-2010 02:32 pm - Hijacking affiliate links
Skittish Eclipse
I've been given a heads up that has done some excellent sleuthing and investigation into hijacked LJ affiliate links:

What is LJ doing to my links?
What is LJ doing to my links? Part 2
What is LJ doing to my links? Part 3

Expect this post to be update through the day as I find out more and come up with a good summary.

ETA: No good summary, but I feel like I should say code got taken down, etc etc, business as usual.
5th-Mar-2010 01:26 am (UTC)
so we're not going to continue to use this service.

Would it be too much to hope that LJ won't be using any script that isn't theirs from now on?
5th-Mar-2010 01:29 am (UTC)
Yes; many ads contain scripts they come with and some services, such as LJ Messenger, require third party scripts.
5th-Mar-2010 01:30 am (UTC)
5th-Mar-2010 01:33 am (UTC)
If you use Firefox, I recommend Noscript. It wouldn't have saved you in this case, though, because the script was being served from LiveJournal itself.
5th-Mar-2010 01:41 am (UTC)
5th-Mar-2010 10:12 am (UTC) - NoScript will help
Since it is a JavaScript problem, NoScript does help, I don't get the redirect at all. Why? Because I've marked LJ as 'untrusted', and it doesn't run any JavaScript.

(And people still tell me that JavaScript is safe and it's silly to disable it. I may point them at this post in future, instead of at my little JS applet which has been known to crash a Mac)...
This page was loaded Apr 21st 2018, 9:07 pm GMT.