Re:Hackers Make $5M a Day by Faking 300M Video Views
by hnguy4 on Tuesday December 20, 2016 @02:01PM
(#13222808)
Yeah was curious about this as well.
[ Parent
| on HN ]
Re:Hackers Make $5M a Day by Faking 300M Video Views
by bitexploder on Tuesday December 20, 2016 @09:29PM
(#13226353)
In truth they were likely exploiting a vulnerability in MethBot. Similar to XSS only server side. The legality of this, if my suspicion is correct is highly dubious, so they kept the details low key.
I imagine somewhere in MethBots virtual DOM emulation they got sloppy and ran code (JS) from the server. Using metaprogramming plus some output they could predict they could use runtime reflection and inspect server side JS object.