Myspace exposes more private profile information

Yet another simple URL modification submitted by a GrownUpGeek.com member makes private profile information available to anyone

In recent weeks GrownUpGeek.com has exposed three very simple methods that allowed anyone to view comments, videos and photos stored in private Myspace profiles. These security holes were available by a simple modification of the URL used to access Myspace. The story of two of these security holes were posted on digg.com, and very quickly spread across the Internet. Once public, Myspace reacted swiftly and closed the two holes within 24 hours. But as soon as those security breaches were addressed by Myspace, more were popping up, and being closed by Myspace, like a never-ending game of whack-a-mole.

In September 2006 a member of Grown Up Geek.com tipped us off to a security hole in Myspace that will allow anyone to view upcoming friend's birthdays on Myspace profiles that are marked as private.

This new hole is particularly interesting because it gives anyone the opportunity to see who the 'friends' are on a private profile, providing that person has an upcoming birthday.