Slashdot Mirror

← Back to Stories (view on slashdot.org)

April to See Month of MySpace Bugs

Posted by Zonk on from the next-up-a-month-of-teddy-bear-bugs dept.

An anonymous reader passed us a link to PC World's coverage of the upcoming Month of MySpace bugs. Organized by a pair of wiseacre hackers tired of the 'Month of X Bugs', they are set up to 'highlight the monoculture-style danger of extremely popular websites.' Though it's supposed to be funny, outside security analysts have apparently been consulted on the project. "Though the project, which launches on April 1, has all the appearance of a practical joke one well-known hacker said he'd been contacted by the Month of MySpace team with legitimate security questions. 'Those guys and I have been keeping in touch,' said Robert Hansen, chief executive of Sectheory.com. 'It's funny but it's not a joke.'"

5 of 165 comments (clear)

  1. But April only has 30 days by Anonymous Coward · · Score: 5, Insightful

    You'd think they'd do a year of MySpace bugs.

  2. Re:well by Omnifarious · · Score: 5, Interesting

    Which is all the more reason to make sure that no software ever has a really huge user base. It's bad for everybody.

    Right now, one major thing that keeps Myspace's user base so incredibly high is the lack of a widely adopted technology like OpenID. Many people get Myspace accounts because they're forced into it in order to communicate reasonably with a friend, and then decide "Oh, what the heck." and build content of their own there as well. I know that's why I have a MySpace account (and, strangely enough, Omnifarious on MySpace isn't me).

    --
    Need a Python, C++, Unix, Linux develop
  3. clown shoes security? by sfjoe · · Score: 5, Insightful

    I don't use MySpace so I know nothing of their security. But this guy's statement struck me, "Even when they have countermeasures in place... it's trivial to obfuscate to evade their detection mechanisms."
    If their security model is based on detecting patterns, then they will never be able to get out of the Red Queen's Race. A properly designed web app has as its core philosophy, "that which is not explicitly allowed is denied". Ttrying to detect all the possible variants of hacking and denying them then is a fool's errand.

    --
    It's simple: I demand prosecution for torture.
  4. Bug Filing Number 1 by Anonymous Coward · · Score: 5, Funny

    Status: OLD

    Severity: Major

    Reproducible: Always

    Description: MySpace is filled to the brim with whiny, middle-class, suburbanite, emo kids whining about how emo their life is and how they like to listen to emo music while cutting themselves.

    Solution: Delete Myspace.

  5. but... by netdur · · Score: 5, Funny

    myspace itself is a bug

    --
    "Steve Jobs invented the world" -- Bill W. GATES