MySpace
Security companies have already found vulnerabilities in MySpace

Month-of-bugs project targets MySpace

Tongue-in-cheek campaign finds flaws in social networking site

Written by Shaun Nichols in California, vnunet.com

Social networking site MySpace has become the latest company targeted by a 'month of bugs' project. 

The project, run by security researchers using the aliases 'Mondo Armando' and 'Müstachio', is officially known as Month of MySpace Bugs, Yuss!, or Momby for short. 

Previous 'month of bugs' projects have targeted everything from Mac OS X to PHP

Advertisement

As the name suggests, the projects aim to disclose a new vulnerability every day for a month. This latest effort, however, takes as many swipes at other month of bugs projects as the target itself.

"Months of Bugs are annoying, so rather than suffering through another, we figured it'd be better to just create our own where we could at least direct the content a little," said 'Mondo Armando' in the 'official announcement' of the project.

The pair decided on targeting MySpace for a variety or reasons, including its substantial user base.

"Months of Bugs are whiny, attention-seeking ploys for acceptance. MySpace's design use is to enable whiny, attention-seeking ploys for acceptance," said the researchers.

The project will take place during April and will be run from a special LiveJournal blog, or at an alternative site should the account be revoked by LiveJournal owner Six Apart.

"Most of what we intend to publish are silly XSS/misleading CSS style bugs that MySpace users may actually be able to use for a little while, and that involve only MySpace.com stuff," wrote Armando.

The pair are also asking fellow researchers to contribute their own bugs to Momby, requesting details and working proof-of-concept samples.

'Mondo Armando' and 'Müstachio' may not need to search too hard for content in the first few days. F-Secure and Sunbelt Software alerted users on Monday to a pair of security hazards currently doing the rounds on MySpace. 

One bug, according to F-Secure, uses a QuickTime vulnerability to steal user information. The other uses fake MySpace profile pages to trick users into downloading adware programs disguised as video plug-ins, according to Sunbelt.

Tags:

Reader comments

More from Computeractive

News

The latest home computing news

Downloads

The best PC tools, applications and more

Reviews

Independent opinions on new hardware and software

Step-by-step guides

Easy-to-follow projects with pictures

PC Help

Solve PC problems with our Q&A

Videos

PC projects demonstrated and product reviews

Articles

An in-depth look at how to get the best from your PC

Magazine

What's coming up in Computeractive

Forums

Get help with your PC problems from our readers

Competitions

Your chance to win computing prizes

Shopping

Great deals on products, services and more

NEW! Computeractive CD Rom 11
All 26 issues of Computeractive from 2008 on one CD-Rom.

Ultimate Guide to Disc Burning
Everything you need to know about creating your own discs.

Create your own calendars softwareCreate your own Calendars
The fun and easy way to create your own calendars!

Computeractive - Issue 280Computeractive Back Issues
Missed an issue? Click here to find a back issue

Blogs

Windows Watch

Windows Watch

Keeping an eye on the latest XP and Vista news

Outlook 2007 email controversy

One of the major changes in Outlook 2007 had nothing to do with the Ribbon but that Word was used to display...

Download Junkie

Download Junkie

Your daily dose of download discussion

Backup important data with SyncBack SE

Keeping certain files backed up helps to keep items safe in case anything disastrous happens to your computer, but although most of...

Advertisement

Free email newsletters

Techno babble demystified...

[Display all definitions]

Or type in any computer-related word and click "Go"

Advertisement

Computeractive is not reponsible for content of Google adverts

Primary Navigation

© Incisive Media Ltd. 2009. Incisive Media Limited, Haymarket House, 28-29 Haymarket, London SW1Y 4RX, is a company registered in England and Wales with company registration number 04038503

Search computeractive.co.uk