TulipTools Internet Business Owners and Online Sellers Community

Quote:The hot new technology behind slick Web pages has suddenly become the hot new tool for cybercriminals...

Hackers and cybercrooks have discovered that Ajax can be tweaked in myriad ways. By corrupting one of the dozens of data exchanges Ajax handles while loading a Web page, a hacker can take over control of the PC.

At the giant Black Hat cybersecurity conference in Las Vegas, talks on what kind of Ajax attacks to expect and how to defend against them drew large audiences.

"Ajax has introduced a huge attack surface," says Billy Hoffman, lead engineer at Web security specialist SPI Dynamics. "Ajax works under the covers to make Web sites really responsive, but criminals can just as easily use it under the covers to do some bad stuff."...

Quote:Samy used an Ajax attack to infect a million MySpace users for the express purpose of adding them to the hacker's friends list -- to make him seem popular.