• On GameSpot: Wii Fit tells 10-year-old she's fat
April 21, 2008 4:35 PM PDT

Hacker redirects Obama's Web site to Clinton's

Posted by Elinor Mills
  • Font size
  • Print

Updated 10 a.m. PDT Tuesday with comment from "Mox."

Someone exploited a weakness in Democratic presidential hopeful Barack Obama's Web site and redirected visitors to rival Hillary Clinton's site over the weekend, according to a posting on the blog of security firm NetCraft.

Basically, visitors to the community blogs section of Obama's site on Saturday night were sent to Clinton's site. Someone using the alias "Mox" claimed credit for the hack on Obama's site late on Sunday.

The writer downplayed the act, saying: "All I did was exploit some poorly written HTML code." Basically, the hack was possible because of a cross-site scripting vulnerability, which is a common hole in Web sites.

A YouTube user named "Zennie62" posted a video clip showing him being redirected from Obama's site to Clinton's.

The redirect has been fixed, but "Mox" says similar vulnerabilities remain on the site.

An e-mail sent to CNET News.com late on Monday from "mox xss" said: "this exploit was not at all politically motivated, and it was simply an immature prank meant purely for fun. Senator Clinton had no hand whatsoever."

Purported hacker says other vulnerabilities exist on Obama's Web site.

(Credit: Netcraft)
Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.
Recent posts from News Blog
Was InfoWorld's CTO of the Year award a year late?
VMWare VI4 renamed to vSphere
Red Hat's new support product demonstrates subscription value
Teen listens to iPod during brain tumor removal
NASA, Google Maps track Southern California wildfires
Sprint first to offer HTC Touch Pro
Flipping out: RIM BlackBerry Pearl Flip 8220 debuts
Sprint HTC Touch Diamond outed early
Add a Comment (Log in or register) 9 comments
That's a real confidence booster!
by Pete Bardo April 21, 2008 5:30 PM PDT
Whether it was due to a lack of understanding on the candidate's part, or a lack of judgment in hiring the web site designer, this does nothing to raise my confidence level in this candidate. If his web site isn't secure, .....

I'm left wondering if the same thing is possible on the other candidates' sites.

Disclosure: I'm Libertarian. I probably wouldn't trust any of the Republican or Democrat candidates anyway.
Reply to this comment
Well......
by cidman2001 April 21, 2008 6:28 PM PDT
I'm not sure porrly written code reflects on the candidate or not. That could be a stretch...unless you're Sean Hannity. As an independent, I'm with you on the trust level of either party. I still think that a McCain/Lieberman ticket would be interesting to say the least.
View reply
It actually speaks even worse of the alternatives
by Hernys April 21, 2008 6:37 PM PDT
Barack Obama didn't achieve perfect security on his web site. Bad, but not as bad when you consider 90% of web sites are not secure either.
Now, his opponents in the presidential race apparently are dishonest enough to deface his site (either them or their supporters). That's much, much worse.
Confidence...
by BHCS April 21, 2008 6:51 PM PDT
Well the best is yet to come. Just wait to see what happens to whoever's elected. Will then keep the IT staff that lost several years of White House/RNC emails or will dump em for someone with some creds. Incidentally, Dr P's site has been hacked too, so don't get too holier than thou.
I thought it was pretty funny.
by close5828 April 21, 2008 6:47 PM PDT
Perhaps there was nothing "political" about this but it was more of a practical joke?

I think some ppl are reading way too far into this than they should.

Viva Independents! :-D
Reply to this comment
Hilary?s is always putting words in his mouth!
by mshidden April 21, 2008 10:24 PM PDT
Now the big question is how funny is that.
Reply to this comment
Better than Obama putting it
by likes2comment April 22, 2008 10:57 AM PDT
in Hillary's mouth
advertisement

In the news now

Apple: DRM-free tunes, unibody MacBook Pro

roundup At Macworld, Phil Schiller touts 10 million songs sans DRM, plus 69-cent songs, a unibody 17-inch notebook, iLife updates, and more.


Countdown to CES

special coverage The tech community descends on Las Vegas as the Consumer Electronics Show gets ready to kick off in all its gadgety glory.


About News Blog

Recent posts on technology, trends, and more.

Add this feed to your online news reader

News Blog topics

advertisement

Inside CNET News

Scroll Left Scroll Right