Myspace lets anyone view private profiles

On August 18 2006 a post was made at our website explaining how easy it was to access (private) comments and photos on Myspace profiles set to "private". This vulnerability in Myspace profiles had apparently been known by the "Myspace underground" for some time, but had not been addressed by the Myspace security people. On August 26, this vulnerability was made public on Digg.com and suddenly the whole world knew about it. Once in the spotlight, Myspace band-aided this "view private profile" hole in less than 24 hours.

Note: The information contained on this page is for educational purposes only. It is hoped that by making such breaches in Myspace privacy/security public, Myspace administrators/programmers can correct the issue and prevent further lapses in security in the future. Myspace.com has been notified of this security vulnerability.

Originally posted: 8/18/06; 12:05PM

Posted by: xxrachelnic0lexx;

Subject: comments on a private profile

ok..here's the Myspace code to view private comments:
http://editprofile.myspace.com/index.cfm?fuseaction=profile.safeDeleteComments&FriendID= *insert their Myspace friendID at the end For pictures: http://collect.myspace.com/user/viewPicture.cfm?friendID= ** **Put the friendID there

For ongoing discussions regarding private Myspace profiles see our Private Forums area.

Ask questions or discuss other Myspace issues in the Myspace forum

TAGs: Myspace, view private comments, view private myspace