Hack The Vote 2008: Obama’s Website Redirected to HillaryClinton.Com
Pro tip to political candidates: When making a website, don’t skimp on security. This is what happens when you allow political activists to design a website instead of professional webmasters. Barack Obama’s website had a Cross Site Scripting vulnerability on a portion of his website that sent visitors to Hillaryclinton.Com.
A YouTube Video from an angry Barack supporter demonstrating this is here.
From Netcraft:
A security weakness in Barack Obama’s website has been exploited to redirect visitors to Hillary Clinton’s website. Visitors who viewed the Community Blogs section of the site were instead presented with Clinton’s website as a result of a cross-site scripting vulnerability.
A user named Mox, from Liverpool, IL, posted an apparent confession in the Community Blogs section on the Barack Obama website yesterday. The subject of the post was, “I am the one who “hacked” Obamas site.”
If you recall during the 2006 campaign, Joe Lieberman complained that his website had suffered a DDoS at the hands of his political opponents. But it turns out that this was the result of poor security practices as well according to the FBI.
We talked about this in hacker class the other day. 🙂 (I think it was two days go? I don’t know. Time here is a very confusing thing.)