Posts Tagged: ajax


2
Feb 10

Facebook vs MySpace: The Tale of the Tape

There has been a lot of talk about Facebook unseating MySpace as the top social network. While that may (or may not) happen sometime in the future, the so-called gray lady of Social Networks is holding its own.

…they are certainly as bloated, with each action requiring far too many pages (despite all the Ajax wooo!).

Social networks do seem to come in cycles, but there is a certain staying power among the ‘big boys.’ Friendster and Hi-5 still maintain a healthy hold. Users are not strict in their use of these sites, and they tend to follow the crowd.

Both sites have their niche Facebook the college crowd and MySpace the music crowd. To assume that MySpace would stumble any time soon is probably a bit ignorant. It’s a huge beast, and difficult to manoever, but they have the established users and target market that they can continue to exploit. Re-developing the site needs to be a priority, but it must be completed with alienating these users, disrupting the service they expect, and detrimenting what is established by the site/for the site.

The final point I’ll make is the popularity of these sites on a world scale. It is of course important to tap into the North American market, but having a global reach gives you…

Visit link:
Facebook vs MySpace: The Tale of the Tape


27
Jan 10

Explanation of how the MySpace worm worked

A step-by-step guide by “Samy”, the guy who created the MySpace Javascript worm that was featured last week. Includes code samples and explains how he got around the limitations of MySpace’s script-stripping engine.

…9) Finally we can do a POST! However, when we send the post it never actually adds a friend. Why not? Myspace generates a
random hash on a pre-POST page (for example, the “Are you sure you want to add this user as a friend” page). If this hash
is not passed along with the POST, the POST is not successful. To get around this, we mimic a browser and send a GET to
the page right before adding the user, parse the source for the hash, then perform the POST while passing the hash.

10) Once the POST is complete, we also want to add a hero and the actual code. The code will end up going into the same
place where the hero goes so we’ll only need one POST for this. However, we need to pre-GET a page in order to get a new
hash. But first we have to actually reproduce the code that we want to POST. The easiest way to do this is to actually grab
the source of the profile we’re on, parse out the code, and then POST. This works except now all sorts of things are
garbled! Ah, we need to URL-encode/escape the actual…

See the article here:
Explanation of how the MySpace worm worked



close Variations of: 'ajax'