Feeds

MySpace to be co-opted into Month of Bugs

But who's actually being played?

Next gen security for virtualised datacentres

An unknown duo is promising to devote the entire month of April to disclosing bugs on MySpace, a preferred networking site for teens and the hackers and pedophiles who scam them.

The pair - who go by the names Müstaschio and Mondo Armando - plan to begin posting their findings on April 1 in what may be an attempt to lampoon a wide variety of communities. Obviously among them is the MySpace site itself, which over the past year has become a playground for hackers who use Javascript to win friends and spam people.

As they put it on their site: "The purpose of the exercise is not so much to expose MySpace as a hive of spam and villainy (since everyone knows that already), but to highlight the monoculture-style danger of extremely popular websites populated by users of various levels of sophistication."

But they also take a jab at the more self-important members of the hacker elite, who are fond of 30-day campaigns that have a tendency to be bigger on hype than actual substance. Speaking on MOMBY - short for "Month of MySpace Bugs, Yuss!" - they say: "If it ends up being just as lame as the Month of Apple Bugs, then we haven't really missed the mark. If it's funnier, then great. If it kills this Month of Whatever fad, then hurray for everyone, it's over."

As MySpace has become the favorite destination for teens looking to hook up to get their freak on, the News Corporation-owned site has also demonstrated a vulnerability to scammers who employ a combination of scripts and good old-fashioned graft. Last week, a researcher discovered the site was hosting a Trojan that attempted to exploit PCs using unpatched versions of QuickTime. Two of the more dramatic examples of abuse on the site came from a user named Samy, who scooped up millions of friends using a script he wrote and a banner ad that infected more than a million users with spyware.

But MOMBY's last laugh may befall your humble reporter - and his many colleagues who have already written about the endeavor. The event is scheduled to begin on April Fools Day. ®

The essential guide to IT transformation

More from The Register

next story
Goog says patch⁵⁰ your Chrome
64-bit browser loads cat vids FIFTEEN PERCENT faster!
Chinese hackers spied on investigators of Flight MH370 - report
Classified data on flight's disappearance pinched
NIST to sysadmins: clean up your SSH mess
Too many keys, too badly managed
Scratched PC-dispatch patch patched, hatched in batch rematch
Windows security update fixed after triggering blue screens (and screams) of death
Researchers camouflage haxxor traps with fake application traffic
Honeypots sweetened to resemble actual workloads, complete with 'secure' logins
Attack flogged through shiny-clicky social media buttons
66,000 users popped by malicious Flash fudging add-on
prev story

Whitepapers

Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Backing up distributed data
Eliminating the redundant use of bandwidth and storage capacity and application consolidation in the modern data center.
The essential guide to IT transformation
ServiceNow discusses three IT transformations that can help CIOs automate IT services to transform IT and the enterprise
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.