Felonius Thunk - Slashdot User

Submission + - The Cross-Site Request Forgery FAQ

Submitted by Anonymous Coward on Tuesday January 16, 2007 @11:09PM

An anonymous reader writes: "Cross-site Request Forgery (also known as XSRF, CSRF, and Cross Site Reference Forgery) works by exploiting the trust that a site has for the user. Site tasks are usually linked to specific urls allowing specific actions to be performed when requested. If a user is logged into the site and an attacker tricks their browser into making a request to one of these task urls, then the task is performed and logged as the logged in user.

Submission + - MSN hacker gets 27 months jail

Submitted by Jerry Macorny on Tuesday January 16, 2007 @10:08PM

Jerry Macorny writes: A 24-year-old undergraduate was sentenced to 27 months in prison for stealing the instant messenger identities of several women and blackmailing one. He also doctored pictures of some of the women, superimposing their heads on naked bodies and threatened to make public the image of one victim if she refused to send photos of her breasts.

Slashdot Top Deals