![windows 8 adding live tiles windows 8 adding live tiles](https://helpdeskgeek.com/wp-content/pictures/2014/03/live-tiles-not-working.jpg)
“The web page that allows creating the corresponding meta tags is still online, although the service no longer works,” Böck said in his report for, a German technology news platform.
Windows 8 adding live tiles code#
This oversight allowed security researcher and journalist Hanno Böck to control content through the host – the subdomain that allowed apps and websites to add a meta tag to their source code and thus serve live updates to their users. Microsoft reportedly disabled the Lives Tiles app in Windows 8 due to its lack of uptake – but forgot to delete its CNAME records, the nameserver entry for subdomains and hosts which utilized the service. Apps and websites that support the feature do so through an XML file, which is created by adding a meta tag to a site’s source code via. Live Tiles is an interactive app that provides users with snippets of information from their favorite application or website – like the Weather app. The subdomain takeover attack – which essentially occurs when a discontinued service is not deleted properly – stems from the Live Tiles feature of Microsoft Windows 8. UPDATED An abandoned news app for Windows 8 can be manipulated to display content of an attacker’s choosing, leaving users vulnerable to nefarious activities including damage to a company’s brand. Web pages using Live Tiles from Windows 8 should remove meta tag