Details of the Livejournal Account Hacks

Brian Krebs of the Washington Post has written about the recent spate of hijackings at LiveJournal. Hundreds of journals have now been taken over by a notorious group called Bantown using a series of complicated cross-site-scripting vulnerabilities. It is unclear whether LiveJournal has managed to close the security holes that the hackers claim to have used. The company says it has, but the hackers insist there are still at least 16 other similar Javascript flaws on the LiveJournal site that could be used conduct the same attack. Bantown group members said they plan to turn their attention to looking for similar flaws at another large social-networking site — via Slashdot