WP might want to update its Youtube embedding code...

Page 1 of 1 [ 3 posts ] 

mr_bigmouth_502
Veteran
Veteran

User avatar

Joined: 12 Dec 2013
Age: 31
Gender: Non-binary
Posts: 7,028
Location: Alberta, Canada

15 Aug 2014, 11:47 pm

Apparently hackers have found a way to use unencrypted YouTube streams to execute arbitrary code. This is why HTTPS is important. http://it.slashdot.org/story/14/08/15/2 ... clear-text



bcousins
Veteran
Veteran

User avatar

Joined: 1 May 2011
Age: 30
Gender: Male
Posts: 809
Location: On a failed Tangara set at Blacktown

16 Aug 2014, 4:01 am

I disagree - There are ways to stop streaming through a site like this - By getting rid of the youtube BBCode is one of them, and it's a cheap fix. Who wants to spend money on an SSL Certificate for an internet forum. Seriously.


_________________
Want another alternative to WrongPlanet?
https://aspergers.network/forums/ <- New Version Coming (hopefully) soon.


mr_bigmouth_502
Veteran
Veteran

User avatar

Joined: 12 Dec 2013
Age: 31
Gender: Non-binary
Posts: 7,028
Location: Alberta, Canada

16 Aug 2014, 6:03 am

Why isn't WP itself running on HTTPS in the first place? It may have seemed trivial in the first place, but thinking about it now, it's not. A lot of people use this site, and if someone were to get hacked because their connection was unencrypted, or their personal information leaked because a non-member managed to crack the user-only sections, that would really suck.