The era of the virus attachments is over

The scarecrow is called XSS (cross site scripting). It is a technique that uses a vulnerability of the website to run a code in background (with the user that doesn’t perceive anything). The are two conditions for the applicability: the page contains a form to send messages in which is possible to type a text and the message is successively posted in the page; third, the website has to be vulnerable for these kinds of attacks. Unfortunately the last conditions is often existent. Thanks to that, the hackers can type their string and the webpage will recognize it not as a message but as instructions. The more struck websites are Facebook, My Space, Forums and other so called Social Networks. The actions undertaken by the hackers can be a defacing or he can cause consequences to the real time visitors.