Recently Ashyley of CyberNet News wrote about how someone else can view a MySpace profile’s picture even if the profile was set to private. Apparently, MySpace has fixed this issue.
But, a few weeks back I came across an interesting post at SlickMania about another site named MySpacePrivateProfile.com. As the name implies, all you need to do is paste the friend id from a MySpace profile and it lets you view private pictures from anyone! Says a lot about MySpace security, huh? The sad part is, you don’t even need a MySpace account or be logged in to view someone else’s private pictures!
I didn’t want to link to a site that couldn’t have been designed with good intentions and give them some link juice! It already has a Google PR 2 & Alexa ranking in the 120,000s. It is indicative of the traffic this site is attracting.
I did want to make sure my readers were aware of this security hole and the false sense of security the ‘private’ feature in MySpace might give you. If you have a MySpace account and have pictures that you think are private, think again.
A good rule of thumb would be to just not to trust any site with pictures or videos that you wouldn’t want someone else to see, however private that website proclaims those to be.
With a lot of people coming here to find out how to unblock a blocked website and searching for information on myspace, bebo, etc., I figured it might be worthwhile to share this information here.
Even if you don’t use this, spread the word to anyone you know who uses MySpace.
Now, don’t forget that MySpace has launched new MySpace Private Profiles 2.0.
Read on to see how they have addressed this issue and the new features offered.
Noone should upload pictures anywhere that they truly intend to keep private. When you upload your stuff to someone else’s servers, you are transferring ownership to them typically (its in the TOS).
To me, though, it is just common sense. Unfortunately, kids these days often don’t seem to have that. Hopefully they heed your warning!
Kyle Eslick’s last blog post..Expand Your Blog’s Reach By Increasing User Interaction
Absolutely Kyle! It definitely is common sense but people get the false sense of security with words like ‘private profile’ which is dangerous.
Thanks for keeping us updated on this one K. While I’m not a social networking user myself, this makes a nice change from all the reports of Facebook security leaks 😛
Troy.. that’s true. I guess any of these popular social networking tools is going to face it’s own share of security leaks when people share so much of their personal information online. MySpace is still booming inspite of better alternatives and I know a few people personally who still use it.
Thanks for the news!
Kyle James’s last blog post..Social Survey: Facebook
You are welcome, Kyle. I am enjoying reading your Social Survey series and off to read the Facebook part.
I guess nothing is secure nowadays. Even i orkut , you can see anyone’s private photos by using scripts.
Madhur Kapoor’s last blog post..The Digs’em wordpress theme by Garry Conn
Madhur, you are right. None is an exception!
K,
Great information and advice for those who use MySpace! (Apparently it turns out it isn’t really their space at all!)
Thanks for sounding the alarm!
Jeanne
Jeanne, you are absolutely welcome! This kind of information unfortunately doesn’t trickle down to the regular users of MySpace. So I guess every bit of effort helps even if I reached just a couple.
K’s last blog post..ShanKri-la Gets a Makeover
K,
Definitely! (By the way, I stumbled this.)
Jeanne
Jeanne, really appreciate it! 😛
Just FYI, this trick won’t work if there profile is set to “private” only the profiles that are public. All this trick is doing is pulling down accessible information
Joe. thanks for bringing that up and sharing it with us.
I am a member of facebook and orkut. While orkut has a similar locked feature (which makes pictures accessible only to friends), it hasn’t been broken yet.
Thousands of orkut scraps circulate with a link to a script that would supposedly unlock pictures. Unfortunately, the script is just a javascript that replicates this scrap (kind of like writing on the wall in facebook) onto everyone in your friends list, and not unlocking anything
The script thus keeps spreading from scrapbook to scrapbook, since everyone wants to see locked stuff. You might want to check if the myspace unlock is something similar that does not really unlock, but keeps spreading by a malicious script running from it. Google pagerank is easy as long as you show up in results on top, but question is whether it works, and whether it poses a risk.
cloud9ine’s last blog post..Hardees – the inevitable breakfast switchover
It’s no big deal really because if you notice, if the person have the account set to private, the pictures won’t show up. It’s basically providing pictures from profiles that almost anyone can see even without this “service”.
I guess the only way this is useful is for those who have public profiles with a private folder. I haven’t tried it out yet, but most likely that’s how it works.
That is an amazing piece of information. Never would have thought about it. In my industry (I run a martial arts school) I run into myspace problems with kids all the time. Threats and such are always happening there. this just opens more possibilities for harassment.
And yes it’s nearly impossible to get kids not to post private things online. Unfortunately their priorities are out of whack.
I’ll stumble and digg this article. It’s a good one.
phils last blog post..Belt Buckles on Sale
As i states before, this service really doesn’t make private profiles public, but it may b only a matter of time before someone figures out how to do it. The internet is like a double edge sword, mainly because these it seems like our society can not live without it because of it’s benefits, but as for children, they are so vulnerable. It’s also the same as when older people (65+) learns how to use the internet. They fail to notice alot of scams and as a result they get taken advantage of very easily.
nothing will ever be private again, if your not posting picture or info about yourself on the web, somone will be, friends, family, random creepers, even some schools do. The world has just changed, people don’t think of these things and I don’t think they will in the futuer, I guess its just how life is these days.
true. the internet is leaky, and compromising pictures just have a way of getting around.
koujis last blog post..haiku poem
This is easy for MySpace to exclude these private pages from the web.
Here’s how.
1. They just need to update the .htaccess file on their server to remove these private pages. This file would need to be kept current.
3. in the web code of these private pages, they insert a NO INDEX, NO FOLLOW tag. This will prevent the page from indexing.
This is Webmaster 101 stuff and Myspace should know better.
just use http://newrequests.com it works good
Try Ultrasurf http://tec-updates.blogspot.com/2008/01/ultrasurf-v88-0-bypass-all-internet.html
and get list of web proxys from : http://albin.1983.googlepages.com/webproxy
Albins last blog post..How can you save a picture from Orkut
Wow thanks for the heads up. Didn’t know someone could exploit it.
best bodybuilding supplementss last blog post..Myoplex Deluxe Protein Bars
I did not know that. thanks for the update
MySpace is still booming inspite of better alternatives and I know a few people personally who still use it.
This is the only working Myspace private profile viewer that will actually display a private profile. Many others have claimed they can, but they don’t have the required software to actually operate a private Myspace profile viewer.
these gaps in these social networks needs to be covered ASAP, due to the fact myspace and facebook are the biggest social networks around it’s weird they the security quality is poor.
.-= jay@ work at home´s last blog ..Need Help With Google Adsense? Ask Lisa! =-.
that site is a fake!
i typed in my friend id and it displayed pictures that are not mine,
it doest work at all so theres no holes in myspace security that are obvious. especially something titled ‘myspace private profiles’
they would find that in an instant and fix it.
myspaceprivateprofile DOESNT work! i tried my friendid which is private and it said PICTURES: 0 and i have pictures. i tried a friends whose isnt private and hers worked but again i stress her profile is NOT PRIVATE. it doesnt work at all.