digg

Facebook Connect Join Digg About

Myspace closes GIANT SECURITY hole - Months too late

grownupgeek.blogspot.com — Myspace closes a GIANT SECURITY hole that has allowed anyone to view private Myspace profile comments and photos for MONTHS! This is a followup to the story that was dugg yesterday about the security hole that has been in use since April but ignored by Myspace until made public on DIGG.COM - the DIGG effect!

Who dugg this? Made popular Aug 28, 2006

Digg DudeWhat is Digg?

Digg is a place for people to discover and share content from anywhere on the web. Digg surfaces the best stuff as submitted and voted on by the community. Take the Tour to learn more.

44 Comments

show profanity settings
expand all
  • eplawless, on 10/12/2007, -8/+101OH NO, HACKERS CAN EXECUTE MALICIOUS VIEWING OF PHOTOS
    THE END IS NIGH
  • inactive, on 10/12/2007, -1/+42I think the point is more that if the security people at MySpace left such an obvious, soft hack as URL-editing open, what else might they have open?
  • inactive, on 10/12/2007, -2/+41myspace users? smart up? huh???
  • pixelmixer, on 10/12/2007, -2/+29to tell you the truth... Myspace was not designed well from the beginning... They will eventually have to revamp their entire structure (which will be a PAIN) to even compete with other sites up and coming. Tagworld.com in particular.

    Myspace's customization was actually a bug that STILL has not been fixed.. and not meant to work intentionally, and they were made popular by this bug.

    They need to make editing a profile built in. Its simply ridiculous that they have ignored it so blatantly and called it a "feature". The least they could do is add a simple little form that lets people add their own CSS instead of "hacking" it.

    Blah blah... the point is, they need to start fixing things, or the users will smart-up and realize that there are better alternatives.
  • jads, on 10/12/2007, -3/+19awe-inspiring words there :)
  • da_bradler, on 10/12/2007, -2/+18myspace sadly is basicly still run by the same group of people that first created it I swear since it's the most popular website on the internet you figure they would have a google sized force behind this site but it seems more like a bunch of highschool kids who just figured out all the "cool" things you can do with html.

    I don't think they understand that the only way to HOLD on to the massive core of people it to make it perfect. I mean it seems to get worse and worse as it gets more popular. imagine if digg still was on the 1.0 code plus got the numbers myspace gets, whens the last time we had any serious issues with digg? I mean we only got kevin rose and he's worth what... 60 million dollars + a new couch *laugh* they have the richest man in the world.
  • pjsk8, on 10/12/2007, -3/+19I was laughing pretty hard....until I read the second half of your comment.
  • titlesaysitall, on 10/12/2007, -2/+14Doesn't it still work if you log out first put the code in the address bar then log in when Myspace asks? It worked earlier after I heard it was patched.
  • MackPrime, on 10/12/2007, -2/+14the digg effect is a myth
  • mancat, on 10/12/2007, -5/+16Kevin Rose is one of many people that runs this site, and I really don't think he does much of any coding.
  • mranissimov, on 10/12/2007, -1/+9The digg effect is not half as big as some of you think it is. 40,000 users or so at the most. 99% of the time when people say "DIGG EFFECT LOL", Digg isn't actually responsible.

    Sometimes when an article gets to the front page of Digg, it means it's "hot" on the internet in general and is getting hundreds of thousands of visitors - from *outside* Digg.
  • inactive, on 10/12/2007, -4/+11Parents who need help keeping their kids under supervision when they're on the net shouldn't be parents to begin with!

    Heres a suggestion to all those parents out there, how bout you actually do some, wait for it, PARENTING instead of leaving the upbringing of your brats to someone else!
  • burke, on 10/12/2007, -1/+7Security people?
  • ionblue, on 10/12/2007, -2/+7um, I don't think it was a "giant" security hole
  • mark1372, on 10/12/2007, -0/+3One of the most annoying dugg story descriptions ever.
  • ayeroxor, on 10/12/2007, -2/+5Damn, you're stupid. That's like saying pop music will go away as this generation grows up.
  • Saintlink, on 10/12/2007, -6/+8Like, yah meanz mi fotos r not safe?

    /cut
  • indulgence, on 10/12/2007, -0/+2http://digg.com/security/MySpace_com_STILL_Hackable
  • indulgence, on 10/12/2007, -0/+1If that is a fix -- I feel bad for rupert murdoch
  • greyghost487, on 10/12/2007, -0/+1still not completly fix there is more open here than they let you beleive.
  • Jeebugorn, on 10/12/2007, -2/+3LOL....very nice goat. btw, that was an IRL LOL.
  • inactive, on 10/12/2007, -0/+1Fixed? No, it's really not.

  • titlesaysitall, on 10/12/2007, -1/+2If it has anything to do with Myspace and security then it's giant.
  • dbug, on 10/12/2007, -4/+5myspace will slowly cease to exist as their userbase grows up.
  • blueoysterdvp, on 10/12/2007, -0/+1Besides the 'My Space' cookies which basically are
    harmless,some profiles have loaded bundled Adware and tracking cookies which are not PC friendly.Example:Falkag.So there is more than one security issue.Their profiles should be safe.If you click on a link then that's a different story.
  • GuitaristTom, on 10/12/2007, -11/+11"I wish my lawn was emo, so it would cut itself."

    AHAHAHAHAHAHAHAHAHAAHAHAHAHAHA emo myspace kids...
  • snurfle, on 10/12/2007, -1/+1And here's the fix...

    Any attempt to log in with the wrong (or even the right) password will yield:

    Sorry! an unexpected error has occurred.
    This error has been forwarded to MySpace's technical group.

  • ThrillSeeker78, on 07/17/2008, -0/+0People just need to be more careful about puting their information up on the internet. http://www.marketwithartemis.com
  • inactive, on 10/12/2007, -3/+3truth hurts
  • dbug, on 10/12/2007, -2/+1Haha. In fact, you're stupid for taking my above comment literally. I was merely pointing out that myspace is full of kids and otherwise immature people.
  • inactive, on 10/12/2007, -4/+2ohhh man glad u liked it :)
  • Pignanelli, on 10/12/2007, -7/+3"I don't think they understand that the only way to HOLD on to the massive core of people it to make it perfect. I mean it seems to get worse and worse as it gets more popular."

    Yes, well, mediocrity has it's priviledges. I played Volleyball at the beach this weekend, and I was kicking ASS, but the better I played, the more they hated me! OK, in retrospect, this makes sense. Oops.

    People seem to love that myspace is not locked down with a bunch of security and restrictions - that's it's brilliance - it's the wild-n-woolly "paste in some html - go ahead try it!!!!!" world of wide-open hackery. And if it doesn't work, or looks crazy goofy, who cares?! It's just a web page... People like to learn, they like to be included, and they like to feel that they can play too. Myspace does that.
  • XBackstabberX, on 10/12/2007, -10/+6me too, i am very disapointed
  • Clbck, on 10/12/2007, -11/+6http://www.*****.COM! Funny jokes about ***** spammers.
  • cody50, on 10/12/2007, -40/+31I wish my lawn was emo, so it would cut itself.
  • buuch, on 10/12/2007, -15/+5damn, i was just was lookin it up so i could exploit it and found this instead!
  • digdig, on 10/12/2007, -19/+9Sigh now I cant MySpace stalk all the people with private profiles.

    SAVE THE THUMBS DOWN. ITS A JOKE. Jeez
  • inactive, on 10/12/2007, -10/+0http://www.socialshield.com

    Helping Parents Protect Their Children on Social Networks
  • ganlet, on 10/12/2007, -14/+2Well least the hole provided a few laughs
  • gimpism, on 10/12/2007, -23/+6damn, he said kevin and his crew be fugly
  • corporate70, on 10/12/2007, -26/+3And yet another reason why I love digg.

    Thank you Kevin Rose (and everyone else who works on digg but does not have the kind of face that gets on a mag cover)
  • wh0wants2know, on 10/12/2007, -27/+4*****
  • inactive, on 10/12/2007, -31/+7too bad your mom hasnt closed HER giant security hole.

    BTW her periods been a few months late too.
  • mastercheif, on 10/12/2007, -42/+7Not if you have a Mac!!!!

  • Add a Comment

    Login or register to comment!
    Or, sign-in super fast with your Facebook account ...


© Digg Inc. 2009 — Content created and posted by Digg users is dedicated to the public domain | Terms of Use Updated | Privacy Policy
DIGG, DIGG IT, DUGG, DIGG THIS, Digg graphics, logos, designs, page headers, button icons, scripts, and other service names are the trademarks of Digg Inc.