For anyone who has downloaded this script (gimp-surf.scm), please remove it until further notice. It is under investigation at this time. It may or may not be a dangerous script.

Thanks for the warning Molly. I'm wondering if it's practical for Gimp Chat to have a Warnings section to alert Gimp users to dodgy and potentially dodgy scripts and sites.

Now someone may have written a GIMP specific malware attack? I sure do hope not.

Looks like, though. But if I understand it correctly, the problem is more about using the Gimp built-in browser on general web sites. All browsers have vulnerabilities that can be exploited by the sites they visit. General browsers (Firefox, Chrome et al...) are patched very quickly when such vulnerabilities are discovered, but Gimp's browser vulnerabilities are likely a much lesser concern for the Gimp authors, since this browser is only meant to browse the online help.

@admins: Will this be reported as a bug?

We don't know yet until Tux arrives on board.

Well, I don't have the script so I can't look at it. I've always thought it was a security risk and a bad idea. I've removed it several times in the past and expresses my concerns with mikechat.

Up until now, no one has verified there was a problem with the links in the script. It appears SysTemX has now been infected by a link in the script. The staff will investigate further and ensure no other copies of the script are posted here.

Good point ofnuts, for security I would suggest users change the Help Browser Preference to Web Browser.
Edit | Preferences | Help System | Help Browser | Web Browser

I have also been affected. I have been cut off getting into Linux, it won't accept my password and I also lost my outlook hotmail page.

Molly, I suppose it's possible that you visited a link listed in that script, which caused issues in Linux, but it's rather unlikely. We would need to know the exact link to really confirm this.

Several things could be the culprit. I've even seen standard Linux updates cause issues with passwords, requiring them to be reset. I sent you an email with the steps to reset your password.

Thank you Tux, the only link I tried in the script was the dafont link yesterday. Thanks for the instrucs, I will try them now.

Well, I'm pretty sure that dafont didn't give you kooties.

Well, I guess not, I have given it a lot of free business...

Anyway, I got into Fedora and guess what, it went right in with my regular password. I have been trying since early this morning.
Thanks I got my outlook fixed, I dug around in preferences.

It's always possible that a legitimate site got hit too. With all the exploits that exist (Poodle being the latest; who knows how these exploits work), it's a wonder how any sites are safe anymore.

I don't know what "outlook tab" is. Is that some kind of Microsoft webmail account? Can you provide a link to the site?

Its okay now Tux thanks. I dug around in the preferences and finally found how to get it back. If you don't know what outlook is, what do you use for your email?
I have these tabs at the top of my FF browser weather, gimpchat, fedora forum, photobucket and outlook mail

Outlook is a Microsoft Windows Email Client. I used and supported it for years in Windows.

I was referring to an "Outlook Tab" in Linux. I don't know what that is. I assume it is some kind of Microsoft Webmail that you access via Firefox.

I haven't used a PC based email client in years. One of the more popular ones for Linux and Windows users is Thunderbird. I don't really see the need to use a PC based email client to store emails on my system. I use the WEB based clients included in my webhosting accounts. I normally use the Squirrel Mail client for Webmail but I have access to Roundcube and Horde, as well. They can all act as WEB based frontends to my email accounts.

Anyway, glad to hear you got it straightened out!.

Thanks, when I mentioned outlook tab, I meant that I had it pinned to my browser, it is handy

Much faster to use than webmail... And in one screen you have all your mail ids, and you can even drag/drop mails between them. You cna even transfer your whole mail between mail providers if you decide to switch... In addition TB will also show RSS feeds and newsgroups.

Are you talking about using webmail or outlook ofnuts?

All of my emails are forwarded to one account anyway so that's not an issue. I have no issues with the speed of my web based email accounts and I don't need an RSS reader in my email client. I abandoned usenet years ago. The last time I used TB was to transfer webmail accounts from one host to another.

I prefer not having copies of emails on my PC and to have full access to my email client on any computer I happen to be near.