Oct 30, 2023

### Injection attack on our sites Our sites have been hit with an code injection attack today. It caused the browser to open an obscure porn site just when the user got to see specifically manipulated comments. Opening the the "comments" tab made it impossible to use the site at all, as it would redirect right away. We always had several protections against this kind of attack in place, and the attacker had to go through several iterations of the attack to find the right combination of escape sequences to fool our mechanism. But in the end, he found a way. Which, in a way, is a good thing, because it allowed me to find and fix this issue. Nothing really serious happened, none of your data or your computer has been compromised. Still, I apologize to all of you, something like this should not happen, but nothing is perfect... My thanks to Philip K who stepped in and tried to mitigate the damage while I wasn't around.