Most recent poster block

[ego-lay_atman-bay]

No, it was real, it just didn't use the api

Snap! version 6.9 and the JavaScript Function block

So, about a week ago, we had our first serious malware attack using users' ability to write JavaScript code in the Snap! environment to present users with a fake version of the snap.berkeley.edu web site, with the goal both of collecting passwords and of potentially infecting users' computers. We've known all along that the JS Function block was a security hole, but our users are generally well behaved and we're not a bank or anything, so I'm pretty sure this was the first real attack (as oppos…