2012 GNAA Tumblr Ruin

On December 3, 2012, the Gay Nigger Association of America, both legally and effectively, exploited a XSS vulnerability in popular web-blog service tumblr resulting in the complete ruin of thousands of blogs. Utilising nothing but a few lines of javascript, an estimated 14,000 users reblogged the following post:

This caused such an outrage that uncounted numbers of news sources picked up the story. Whilst hundreds of users took to other social networks to cry about the personal violation they had endured, the mainstream media was forced to largely ignore this in favor of awkwardly explaining what GNAA stands for. Showing an impressive lack of understanding of the internet, despite it being the basis of almost all of this year's hot shit news stories in one form or another, news sources have settled on describing GNAA as a "racist anti-blogging group", yet another example of straight old whitey trying to spread misinformation about the proud homosexual gentlemen of colour.

Tumblr is Vuln

Friendly tumblr staff member Christopher Price

For those of you without a degree in CSIII, a XSS, or cross-site scripting attack is made possible by a website not properly sanitizing input and thus allowing scripts to be executed on the page of a website. This is one of the oldest methods of web penetration, and should be extinct in 2012. Clearly the hard working development team at Tumblr don't feel the need to patch these obvious and frankly retarded vulnerabilities, instead focussing their attention on being very pleased that Tumblr panels are still a thing.

There were numerous XSS vulnerabilities identified on the site, including the video post field, which was exploited this time by the GNAA, the image post field, and every single mobile post field.

Somebody Call the e-Police

Tumblr was made aware of the issue two weeks prior to the exploit via direct communication. Clearly the Tumblr staff email was down, as the GNAA did not receive a response after helpfully attempting to assist them in securing their services. As such, there was no option but to demonstrate the vulnerability, because the friendly staff at Tumblr would surely want people to know about the problem as soon as possible so that they could promptly fix the issue.

No accounts or sensitive data were unduly compromised by the uncovering of this security hole, as the "reblog" function was merely utilized. It is best to think of it as a site feature, rather than one of the most popular blogging platforms on the internet showing a startling disregard for the security of its users. It is easier that way. Naturally, the inability of the average Tumblr user to make the distinction between the two has led to many hilarious threats of lolsuits. Good luck with that.

	“	Gary_Niger hey you gave everyone on tumbler a virus I could and should sue you! I would have supported you if you would have not done this!	„
	—This bitch knows the score.

What did Tumblr do to Deserve This?

Tumblr does no more than provide a shield of relevance to bloggers of the worst variety. Bronies sharing pornographic images of animals from children's cartoons, Hot-Topic shoppers showing off their latest Invader Zim piercings, and New York hipsters spending 20% of their free time posting their lunches to Instagram can all be found carelessly grazing on tumblr, waiting for the next biggest happening to reblog and share with all (omg) 200 followers. Disgusting. Not only does this filth exist in the stores, schools, and places of work of the world, but is continuing to populate the gene pool, giving birth to even more abominations of mankind.

Is this truly the future that great visionaries of the past dreamed for?

Lulzy quotes

Tumblr are aware though so it's coo.

Only a few thousand blogs.

“	These domestic terrorists ought to be found and executed. They are as dangerous as AQ and we ought to stop treating them as a mild pain in the rump.	„

“	You mean a masterful destruction of private property. Hopefully, you'll be as amused when someone hacks your paypal/bank account.	„

“	@Gary_Niger OMG I HATE YOU YOU STUPID CUNT PLEASE DIE OMG DIE PAINFULLY I HATE YOU SO MUCH IVE LOST 40 FOLLOWERS BECAUSE OF YOU OMGGGG DIE	„

See Also

• Bronies
• DONGFORCE
• GNAA
• SANDYLOOTCREW
• Tumblr
• XSS

External Links

• Betabeat
• CNN
• cnet
• NBC
• USA Today
• Gizmodo
• Slate
• NPR
• Gawker
• The Guardian
• Mashable
• Naked Security
• Zimbio.com

2012 GNAA Tumblr Ruin is part of a series on Social Media Visit the Social Media Portal for complete coverage.

2012 GNAA Tumblr Ruin is part of a series on Tumblr. [Become triggeredEducate yourself]

Tumblrfags 16-year-old girls • Anonymous Asexual • Bronies • Cash Master • Columbiners • Cumberbitches • Potterheads • Hipsters • Homestucks • I dislike Cis People • Feminists • FanFic Critic • Genderfreaks • Leelah Alcorn • Lifting Blogs • Lil Miss Jay • MechaShockwave • Scene kids • Social Justice Warriors • Sophie Labelle • Special Snowflakes • Tom Preston • Tumbears • Vade • Racistsgettingfired Tumblr Memes Assigned Male • Ayy lmao • Cheeky Nando's • Doge • Everyday Sexism Project • Gen Zed • Hufflepuff • It was my privilege • Luigi's Death Stare • Social Justice Sally • Tumblr Panels • What is Air Tumblr Drama 2012 GNAA Tumblr Ruin • Ableism • Dashcon • Dear Cis People • Derpy Hooves • Fake Schizophrenia • Independence Day Invasion • Josh Macedo • Nerdy Fandom Gateway Theory • Operation Overlord • Patriarchy • Personal Pronouns • Princess Molestia • SJWiki • The Great /pol/ Social Justice Raid of 2013 • Valentine's Day Massacre

2012 GNAA Tumblr Ruin is part of a series on epic events and trolls

Epic Win #Cut4Bieber • 2011 Norway attacks • 2012 GNAA Tumblr Ruin • AFI Incident • /b/lackup • /b/space • BadfurDay VS. DeviantART • Bullet to the Head of the NRA • Dub the Dew • The Chanology Experiments • CosmicJohn CL Experiment • Chan Death • dAmn Exploit • DeviantART Policy Changes • #ExilePitbull • Firefox XPS IRC Attack • Guatemala Day • Habbo Raid 2006 • Habbo Raid 2007 • Hitler: The Babe Within • Internet Vigilante Group • JEWS DID WTC • Judith Park's Leaked Photos • LiveJournal Buyout 2005 • Muhammed Sex Simulator 2015 • LiveJournal Buyout 2007 • LiveJournal Strikethrough • The Rolling : MTV Gets Rickroll'd • Old /b/ Day • Olympic Flame • Operation LIONCASH • Operation YouTube • Pokéclipse • PROJECT CHANOLOGY • Pwnest Peters • RFJason CL Experiment • LJ Abuse Conspiracy • #SANDYLOOTCREW • Sharecash DDoS • Y!Gallery Bans Anthro • YouTube Civil War • YouTube Furry War • Agile2013 • Waterproof iOS7 • The Fappening • Hitler TopTens • Ebola-chan • He Will Not Divide Us Epic Fail 4chan's Death and Revival • /b/'s Cancer • /b/-day • Boston Fail Party • Chanocalypse Naow • Dshocker • Em/b/assy Security Leak • GoddessTrinity • [email protected] • Italian Wikipedia Publicity Stunt • Operation Antfuck • Operation Awesome • Operation Blue Crayon • Operation Falcon Punch • Penis Pump Sex Scandal '06 • Perfection Girl • Shaymin • The ED Civil War • The Great Hack Of Facepunch • The Great ImageFap Troll • Re/b/oot • Sonic-cide • Operation Timebomb v2

2012 GNAA Tumblr Ruin is part of a series on the Gay Nigger Association of America.

Members • Victories • Related BLACK_MAN • DiKKy • fl0ss • Grog • Hipcrime • jesuitx • Jmax • l0de • LiteralKa • Meepsheep • Oliver Hart • Rucas • sloth • Timecop • weev 2012 GNAA Tumblr Ruin • Angryjedi • Cut4Bieber • Diego Grez • Fluttershy • Firefox XPS IRC Attack • The Great Dumbledore Dies Meme of 2005 • HighInBC • JEWS DID WTC • MuZemike • SANDYLOOTCREW • Selery • UK Lootfest 2011 • More.. Dangerman • DiKKv • dongforce • Gayniggers from Outer Space • Goatse Security • Grogv • KLULZ • Last Measure • Linux for Niggers • NCF • Obetrol • Slashdot • Spaceghetto

Featured article December 4 & 5, 2012
Preceded by Futurama	2012 GNAA Tumblr Ruin	Succeeded by Fleshlight