Slashdot Mirror
MySpace Private Pictures Leak
Martin writes "We all heard about the MySpace vulnerability that allowed everyone to access pictures that have been set to private at MySpace. That vulnerability got closed down pretty fast. Unfortunately though (for MySpace) someone did use an automated script to run over 44,000 profiles that downloaded all private pictures which resulted in a 17 Gigabyte zip file with more than 560,000 pictures. The zip file is now showing up on popular torrent sites across the net."
fetch!
Trolling is a art,
It's p2p diversion... It was the RIAA. Brittney Spears or Brittney next door? Curiosity and perversion are certainly more powerful than greed.
Ask 'Who cares?'
Then ask 'why?'
Then ask 'so?'
Then keep asking 'so?' until you realize it's not that big of a deal.
Problem solved.
A unique way to learn a language: http://languageloom.com
Oh lord...there are gonna be some angsty teenagers with real reasons to cry soon...
I personally have better things to do than waste 17gb of space -- and a large amount of time -- looking through other people's pictures.
Title says it all...
How to Download YouTube Videos
No way would I touch that torrent.. all it takes is one underage myspace kid to have posted one nipple.. cue child pornography charges/public outcry/p2p filtering mandated/end game. It's the wet-dream of the **AA crowd.
I understand the general idea of privacy...but to expect any sort of privacy by putting your pictures online onto a server out of your control isn't exactly the smartest thing to do. I say if you've voluntarily uploaded it on one of the social networks, it can't be THAT private.
I know, I know, the myspace demographic doesn't know any better.
the power of bored horny teenaged males
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
Looking through all the junk is going to take too long.
Yeah. Good grief, just what I need - 17Gb of pictures of other peoples cats.
But on the plus side, you could head over to Fark and be a LOLCAT GOD.
Weaselmancer
rediculous.
Somebody is going to write it.
activestudios web design
"Um, Anybody concerned with internet privacy along with everybody who had a myspace account with pictures posted privately they did not intend the public to see."
I thought one of the first rules on the internet was that anything you put out there can fall into the wrong hands / become public?
I certainly wouldn't trust MySpace with personal affairs - if not because of technical glitches / hackers, then because of a disgruntled employee who decides offering the entire database up is so much more rewarding than going postal.
Though the whole idea of using MySpace - a site where everybody openly shares information about themselves.. that's the whole point, after all - for *anything* private at all sounds ridiculous to me in its very premise.
Just my 2cts.. I do feel sorry for those who are/will be affected, especially in the days to come as the juicier bits are filtered out and plastered all over the web and into youtube videos for truly everybody to see, as even though my opinion is that there's no reasonable expectation for true privacy on those sites, that doesn't mean they asked for some stupid hacker and a scriptkiddie to go running amok with it.
By covering this story, Slashdot has exponentially accelerated the spread of these images, and the number of seeders.
Wow, 17 gbs of pubescent girls doing the "Blue Steel" face. What a mind numbingly waste of bandwidth and time.
Oh, for the days when sig's didn't have to be cute...hey, wait a sec.
CATS: All ur cheezbergr r belong to us
/got nuthin'
//slashies!
I downloaded the first zip, which is the first GB of images. I unzipped it, and I looked at the first 4500 images before falling asleep. 999 out of 1000 are crappy cellphone pics of ugly people drinking a beer and flipping off the camera, or vacation pics, or pics of someone's crappy car, or just simply snapshots of people (the vast majority).
So far out of 4500 images, I found exactly zero images that I think anyone would give a crap about. I'm not even sure why the vast majority of them are even bothered marking private; nobody would care about them at all.
Myspace appears to use a static content server that does no validation of who you are before returning JPGs.
When not working or browsing Slashdot, a friend and I will exchange URLs to profile pics of "interesting" looking women. If the profile is private, the URL to the private JPG is not protected and we would exchange those instead. I haven't spent any time trying to find a pattern in the seemingly-random JPG names, so it appears difficult to pull the private images of any one person, but in general everyone's pics are available if you know the URL.
I went to eat some animal crackers and the box said, "Do not eat if seal is broken." I opened the box and sure enough..
Sure there is. Ignoring the way BitTorrent actually encodes the information, and assuming that somehow every file name could be stored as one byte (ignoring the obvious flaw with that), by keeping all of them at the torrent level you'd require "more than 560,000" bytes just devoted to file names. Since the general rule of thumb is to keep the actual .torrent file around 100KB, give or take, that's right out.
Now, throwing in the way the .torrent file actually stores the list of file names, you're looking at at least 21 bytes per file. Assuming 560,000 files, that bloats the .torrent file to over 11.2MB - and that's still not realistic, because it requires every file to be less than 10 bytes in size and all of them to have empty path names. (Which is obviously not valid.)
Throw in realistic constraints, and you're adding another 15 bytes, bringing us to a total of 36 bytes per file - bloating the .torrent to 19.2MB, just for file names.
So, in short, the reason to place them in a ZIP file and not use the multi-file feature is because using the multiple file feature would massively bloat the .torrent file. Now the final .ZIP file has similar requirements per file in the ZIP file, but that becomes payload as part of the BitTorrent download and not something that has to be downloaded via non-BitTorrent means first.
Finally, for an explanation of where those numbers above come from, the "smallest possible" form for a file would be:
"d6:lengthi0e4:pathlee" (21 bytes)
The "more realistic constraints" brings that to:
"d6:lengthi100000e4:pathl8:0000.JPGee" (36 bytes)
Yes, the .torrent file is essentially "plain text" although the piece hashes are stored as binary strings. It's encoded using "Bencoding" - which isn't the most compact of formats.
You are in a maze of twisty little relative jumps, all alike.
Those multiple .RAR files most likely originated on Usenet, where corruption-resistance is very important (indeed, the .RAR files are often accompanied by .PAR parity files as well).
.torrent was probably just created from a usenet download, omitting the .PAR files (which are unnecessary when using Bittorrent).
The
Reinvent the wheel only at either a lower cost, greater effectiveness, or your own personal enrichment and satisfaction.
No it didn't. MySpace let this thing go on for months. From TFA:
The irony (and scandal) is that they not only failed to uphold their privacy policy despite being in the public spotlight over the last 2 years precisely for privacy issues, but that they didn't bother to acknowledge or fix this bug until a high traffic site reported on it.
parasight.de
The two faced attitude of Slashdot rears it's ugly head again.
It's almost like there's more than one of us here, isn't it...
0 1 - just my two bits
It is done for the same reason women, including me, enjoy fretting about rape: they're flattering themselves.
One thing the internet's sheer size teaches you: you are just another nobody, who'd have to dig deep to find some trait that is simultaneously unique and valuable. On the one hand this is a Good Thing, because it blasts from Earth forever the notion that one might be a freak in some way. On the other hand, now we have to struggle to differentiate ourselves, even in our own minds.
FATMOUSE + YOU = FATMOUSE