Google Video may be exposing the username and passwords of users who post videos to their MySpace accounts and serving this information over unsecure Internet protocol, with an http URL and not https.
…This isn’t a Google problem they’re just calling the Myspace login capability. The fault lies with yspace not securing (and enforcing) the login itself.
Others have pointed it out before: http://momby.livejournal.com/3314.html?thread=54258
IMO it exposes two reasons to be worried
1/ How many people use the same password on Myspace as they use on their email account (or elsewhere)? in one hit an unethical person would have access to both
2/ How many email addresses are sitting in plaintext on proxy servers just waiting for a spammer to snaffle them up and start selling viagra to them?
Because the login is not SSL encrypted there are a number of vectors to allow access to the information some of which could be enabled by someone running a rouge hotspot in a Starbucks, airport or college campus through to someone trawling an ISPs proxy logs (with an automated filter looking specificqally for the login page and gathering the POST data off it not too hard)
Myspace are NOT the only site to have this weakness, and…
Go here to see the original:
Google Flaw Gives Out MySpace Login Info!
- Related posts on friends facebook
- Famous (science) Online Keyword Searches
- Top 5 iPhone Challengers | Project Lurpin
- Related posts on information friends
- How Do We Know What Is Out There Beyond The Walls? (update …
- Facebook gives itself a birthday face-lift
- Tribe, Trusted, and True
Related posts:
- Confused yet? Fighting Facebook (and Google), MySpace update
- Social Networking Sites and Your Email Address
- myspace login
- Jack Herer at the High Times Cannabis Cup 2007 in Amsterdam
- Google, Yahoo, Microsoft Team Up Against Facebook Connect
Tags: directories, facebook, friends, information, japanese, myspace, online, search, search-engine, social, starbucks, traffic, tutorials