Social Networking Sites Full of Security Holes

athloi writes "Social networking Web sites such as MySpace.com are increasingly juicy targets for computer hackers, who are demonstrating a pair of vulnerabilities they claim expose sensitive personal information and could be exploited by online criminals."

Perhaps ran into one of these

[JimboFBX]

My girlfriend's MySpace page became hijacked fairly recently and was forced to post advertisements for some website. Needless to say, she knows better than to give out her username and password to any website. I also called up namecheap.com, the domain provider and complained about the website that was being advertised. Nothing will probably be done, and how this happened will probably remain a mystery. I've always wondered if myspace actually uses a challenge token to log in, and if all it takes is a replay attack to log in.