Security researcher Leigh-Anne Galloway came across this security oversight back in April when she stumbled across an old Myspace account of hers. The researcher decided she wanted to delete her account, but she needed to sign in first. As you can see in the above screenshot, Myspace asks for several pieces of personal information before it will restore access to a lost account.
That means a user can recover their account with just their name, username, and date of birth. A certain breach confirmed by Myspace in lessens the load of discovering these two bits of information.
As she explains in a blog post :. Man, I'm worried now too because his site says it logged my IP address and I should be prepared to be hacked. I wonder how long every morning does this kid stand in front of the mirror and convince himself that he's a hacker. After that he goes on writing about all sorts of outdated crap, including Internet Explorer, hacking Myspace accounts, and decorating the desktop. Just read through his website, especially the documents that he claims to be "the sacred documents of the internet.
Just because you can reduce fractions in your head doesn't make you any smarter than an average high schooler. And about your friend's name: "A handle will help those identify how you want to be percieved.
For example, if you want to come across to people that you can accomplish the impossible, dividesbyzer0 is an exceptional name to go by since the division of zero is impossible.
Put the " h4x0r h4ndb00k" down. I see all this bashing on people too much on tech forums. These are not the same things so work arounds for seeing simply items not loaded will not work for items marked as private for myspace. Is there a way to block them from knowing? I dont know how to unblock comments from certain person, can u help me with specific instructions? Could someone send me a working set of codes for myspace hacks? Especially for viewing messages, friends, and hidden comments. Email me please!
Alright, if someone knows a way to read private blogs, could you please send me the code at [email protected]? If you manage to view those private profiles, you can be taken to court… and you will lose. No wonder there are so many suicides. I just got a new background and I guess it deleted my comments.
Please help me Thank you. I think it is so wrong that people are going thruogh other peoples comments and stuff on myspace. Its not fair on the person at all! My daughter had a profile with hidden comments and friends because there was a certain guy that started to stalk her. We changed her profile and all was well until he used this Firefox to see her hidden comments and find out where she was going to be on a certain night.
He went to this place, found her, raped her and is now sitting in prison. She is 15 years old. If one guy could do this, how many other young kids or women are at risk?
Think about it. The go to your page if you want to see friends — go to your friends page 1 and if you want to see comments check your own comments.
On MySpace, I have someone who has not hacked my myspace; but somehow read my messages. Is there any code or way that the person has done that. I need to know immedaitley! Please- i need this stalker out of my life. The code can still work. You just have to edit it.
Where it says user. Just replace home with view. And bam.. Pretty simple. Please help!!!! Thanks a bunch. Save my name, email, and website in this browser for the next time I comment. Please click on the following link to open the newsletter signup page: Ghacks Newsletter Sign up. Ghacks is a technology news blog that was founded in by Martin Brinkmann.
It has since then become one of the most popular tech news sites on the Internet with five authors and regular contributions from freelance writers. Search for:. Martin Brinkmann. Related content A bug in Vivaldi browser disables the forward and back buttons if you open a new window. Bittorrent client qBittorrent 4. Microsoft Edge 97 released: here is what is new.
Brave Browser users doubled again this year to over 50 million monthly active users. Is Microsoft adding too many controversial features to its Edge browser? Microsoft is adding more bloat to Edge with a Games button. Comments RLC said on February 5, at pm.
Steph said on February 23, at pm. PCC said on February 26, at pm. Hey…do u kno how 2 hide where it saiiz how manii commentz u have? Christina said on March 14, at pm. Rita said on April 17, at pm. Said by ace April 12, at about pm. Tony said on April 25, at pm. Unfortunately, according to information shared exclusively with TNW by security researcher Leigh-Anne Galloway, this process is deeply flawed, and makes it trivially easy for a bad actor to gain unauthorized access to any account.
This is an automated process. So, what do you need to get into the account? It turns out, not much. It validates just three pieces of information: name, username, and date of birth. Names are found on the profile itself, and you can discern the username from the URL so, for myspace. The only tricky part is the date-of-birth, although you can figure that by sleuthing on other social networking sites. Once you have obtained those three pieces of information, you can essentially break into any Myspace account.
Following responsible disclosure best practices, Galloway informed Myspace of the vulnerability in April of this month. The company sent an automated reply, but has otherwise failed to act.
This inaction forced Galloway to take action into her hands, and she has publicly disclosed the vulnerability while it still exists.
0コメント