One of the first social networking upstarts, MySpace, is facing continuing security problems that threaten to spoil many of the innovative features that make the site useful.
Hackers, spammers and Internet malcontents have turned many of the "group" sites, which are dedicated to interests such as home beer brewing, animal welfare and gay rights issues, into cyber-graffiti walls, filled with offensive comments and photographs.
Those trashing the group profiles are known as trolls, who delight in making a mess and try to one-up each another with aggressive vandalism. They post taunting videos on YouTube.com, egging each other on and making real-world threats.
It has left many MySpace users struggling to maintain order on their groups. They allege that MySpace has been lax in fixing several well-known glitches that persist on the site despite repeated efforts to contact security administrators. MySpace, which would not grant interviews for this story, contends it has beefed up its security department and does its best to patrol the site for misbehavior.
"Over the last two years, I have notified MySpace not only of the problems but given them possible solutions as well, but they have only responded with a thank you, but there never has been any result," said Corey Scott-Walton, of Sacramento, California, who runs a group for craft-beer enthusiasts.
Scott-Walton is one of several MySpace users who became fed-up with trolls and created their own tools for combating abuse.
One of the problems is a glitch that allows vandals to post comments on a group even when they aren't an approved member. Usually, a moderator must approve new people who join a group.
That glitch opens a door to two more. Another is "bombing," where dozens of empty comments can be posted in the group's discussion area using an automated tool. The boxes push down the real comments and create hundreds of empty comment pages, effectively ruining a conversation. Another problem is "pinning" where a new topic on a discussion thread can be pinned on any forum.
Even if the account of the vandal has been deleted, the offending posts are sort of halfway deleted, with no comments visible but page after page of blank space. Scott-Walton wrote a tool in Visual Basic called "Thread Cleaning" that allows moderators to delete those posts.
MySpace's terms of service forbid use of automated tools and scripts, but users say they've been left with no choice.
Another MySpace user who is a Web developer in Connecticut created a tool that will check his group every 20 seconds for spam and delete it. The Web developer, who did not want to be identified for fear of harassment, said he has used the "report abuse" feature hundreds of times.
"I've found that the more people that report an [abusive] account, the faster MySpace makes it go away," he said.
Trolls will often create hundreds of "sock-puppet" profiles that are used merely to harass other users. Once the particular profile has been shut down by MySpace, the troll will simply use another one to continue attacks.
Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
Fortinet November Threatscape Report Shows Calm Before Holiday Storm 2008-12-05 16:00:00+11
Epicor® Cited as an Order Management Solutions Leader by Independent Research Firm 2008-12-05 15:52:00+11
F-Secure: Growth In Internet Crime Calls For Growth In Punishment 2008-12-05 13:00:00+11
International researchers gather in Sydney to preview the clever web 2008-12-05 09:48:00+11
Borderless corporate networks to shift focus to secure content management in Australia in 2009 2008-12-04 16:06:00+11
Everything you need to know about email and web security (but were afraid to ask)
What you don’t know can destroy your business. It’s hard to imagine modern business without the internet but in the last few years it has become fraught with danger. Read on to discover how internet security can give your business a competitive advantage.












