digg

Facebook Connect Join Digg About

Explanation of how the MySpace worm worked

namb.la — A step-by-step guide by "Samy", the guy who created the MySpace Javascript worm that was featured last week. Includes code samples and explains how he got around the limitations of MySpace's script-stripping engine.

Who dugg this? Made popular Oct 17, 2005

Digg DudeWhat is Digg?

Digg is a place for people to discover and share content from anywhere on the web. Digg surfaces the best stuff as submitted and voted on by the community. Take the Tour to learn more.

31 Comments

show profanity settings
expand all
  • PictureMeRollin, on 10/12/2007, -0/+1I'm assuming MySpace has blocked this code now? I can just see this running out of control...
  • foohookups311, on 10/12/2007, -0/+1Very Interesting and not a dupe.
    If I knew how to code Java I would play around with some of the examples in this article. I wonder if some of these example can be applied to other social networking sites, say something like Friendster???
  • inactive, on 10/12/2007, -0/+0http://digg.com/links/Biggest_myspace_chain_ever
  • lafingputz, on 10/12/2007, -0/+0The STORY about the worm was posted before. Notice the difference in this post where it's about HOW he did, and a step-by-step guide through the code.
  • Neil, on 10/12/2007, -0/+0So, could someone please tell me how (if) I can have a Javascript Alert in a myspace profile? I just wan't an alert, not this cool ass script that now does not work.
  • jiminoc, on 10/12/2007, -0/+0not a dupe, very good read
  • hectorhector, on 10/12/2007, -0/+0AWESOME INTERVIEW WITH SAMMY: http://blog.outer-court.com/archive/2005-10-14-n81.html
  • frontbrain, on 10/12/2007, -0/+0This guy really dugg deep to get this working.
  • vSanity, on 10/12/2007, -0/+0Alright, I've got a question. How can you put your personal dugg stories RSS feed into myspace. Stupid myspace blocks javascript. I know the article shows how to run javascript within myspace, but I'm too computer stupid to figure it out.
  • Scan, on 10/12/2007, -0/+0Interesting.. seems he had to go to some lengths to get this working, Myspace actually seems to be blocking a lot of stuff.
  • JohntB, on 10/12/2007, -0/+0Myspace apparently went to a lot of work to keep this from happening. I'm surprised by how much they blocked: any mention of the word javascript, embedded double-quotes, innerHTML. If it wasn't for the buggy browsers that read "javanscript" as "javascript," this probably couldn't have happened. Better luck next time, Myspace.
  • hectorhector, on 10/12/2007, -0/+0if u actually read the article, this story is about the script and how it works.
  • ThePharaoh, on 10/12/2007, -0/+0Nice post. +digg
  • Mirag3, on 10/12/2007, -0/+0This is genius. Pure genius. I mean, I'm not exactly a web programmer, so it may be more impressive to me, but I'm used to coding in Java and C++, where actually injecting code is much harder than web programming. Anyway, i love how the bypassed all the tags by simply concatenating two strings.
  • hadees, on 10/12/2007, -0/+0I wonder if this could work in digg? dig your own story =)
  • hax0r, on 10/12/2007, -0/+0Excellent!
  • stevey5036, on 10/12/2007, -0/+0great digg
  • fox, on 04/11/2009, -0/+0@ hadees:

    something similiar has been done with digg, except its not really self spreading - it was where the actual link to the "story" was digging it and the user didnt have to click "digg" to digg it, the link to the story did it.

    It got so many diggs so fast haha, way more than it shows now..

    http://digg.com/technology/Huge_digg_glitch_found_
  • bryan8m, on 10/12/2007, -0/+0Awesome
  • GamblerZG, on 10/12/2007, -0/+0Gee, it's so simple: do not strip known bad tags, strip everything that's not known as good. Prepend 'http:' to every src and href, if they don't have it alredy.
  • EagleX, on 10/12/2007, -0/+0Priceless! I thought the whole idea was brillent, but thinking about it, imagine what someone with not such a friendly intent might be able to do. Pretty sweet though!

    + Digg
  • Carbonewitz, on 10/12/2007, -2/+1 Bismillah YOU ruin digg! you have no idea what you are talking about. this story explains HOW he did it. Way to make an ass of yourself as the first post.
  • inactive, on 10/12/2007, -1/+0Get used to it people. There will always be the idiots out there that don't even bother to read an already posted story, and then later digg a link from that site to the front page. Then they defend it! Reminds me of when someone posted a link to a certain photoshop tutorial that came from a story showcasing photoshop tutorials, that was already on the front page...
  • gwdigg, on 10/12/2007, -1/+0No digg for this dupe.

    The first digg story (http://digg.com/programming/Geek_goes_popular_on_Myspace) provided a link to here (http://fast.info/myspace/)

    All that the new story is a link to the very first link on that page! Duh, didn't anyone read the story the first time?

    First two lines from original digg story link:

    I'll never get caught. I'm Popular., 10/04/05, -samy
    (technical explanation and actual code here)
  • AlfaWolph, on 10/12/2007, -1/+0Sorry but this IS in fact a dupe. You don't call a page that is linked and resides on the same site as the first digg story- and call it a new story. If you saw the first story you saw this one, too. Sorry, no digg. When are we gonna get "bury" points for ***** like this?
  • inactive, on 10/12/2007, -5/+1Uhh this story was just on the front page! No digg for you. Do a search next time. You ruin digg.
  • genetic, on 10/12/2007, -4/+0nto a dupe *****
  • MickeysHouse, on 10/12/2007, -4/+0Do some research stupid! Stop double posting.

  • Add a Comment

    Login or register to comment!
    Or, sign-in super fast with your Facebook account ...

© Digg Inc. 2009 — Content created and posted by Digg users is dedicated to the public domain | Terms of Use Updated | Privacy Policy
DIGG, DIGG IT, DUGG, DIGG THIS, Digg graphics, logos, designs, page headers, button icons, scripts, and other service names are the trademarks of Digg Inc.