the XSS security challenge

LiveJournal is offering a free permanent account and possibly other prizes to those who find new vulnerabilities in its XSS Security Challenge. LiveJournal has recently been attacked via a Firefox XSS exploit.

Anybody bored and want a permanent account? Read on:

They are going to be running an XSS (Cross site scripting / Javascript injection) bug hunt challenge.

The biz people like the idea but need to squabble over rules and legal stuff.

Unofficially, it’ll involve giving out permanent accounts and money (or gift certificates).