by Mark Silva
People who logged on to Sen. Barack Obama's campaign Web-site and went looking for an online community of the like-minded ended up at Sen. Hllary Clinton's Web-site instead.
The work of a hacker.
A flaw in the computer coding of Obama's site and a mischievous surfer who exploited it are blamed for the detour days before the Pennsylvania primary.
Some who tried to visit the community blogs section of Obama's site started noticing last week that they were being redirected to Clinton's campaign site. Security sleuths said a hacker had taken advantage of a "cross-site scripting" vulnerability in Obama's site. Netcraft Ltd. said the hacker injected code into certain pages, code then executed when visitors tried to go to Obama's community blogs section.
Needless to say, that cross-site Windows-dressing has been removed.
The hackng appears to have been a prank, but researchers suggest that this breach exposes the vulernable underbelly of the candidates' online operations. Try this: A similar mechanism could be employed to redirect visitors a site that steals personal information from visitors -- or maybe even make Obama contributions to Clinton.
"With people closely watching the heated contest to determine the next U.S. president, you can bet that this won't be the last time such attacks happen," Symantec Corp. researcher Zulfikar Ramzan wrote on the company's official blog.
The Associated Press relayed this story from San Jose, assuming hackers wion't know the way to make use of this intelligence..




