MySpace Bug Leaks ‘Private’ Teen Photos to Voyeurs

I was never a big fan of Myspace, and I was never really a big fan of any of those social networking sites.  Facebook was alright until they started adding the extra “applications” and that has completely turned me off from the whole thing.  There have been flaws with the social network giant Myspace and there is yet another to add to the list.

Myspace receives bad press because of child predators, and them having the ability to talk to anyone they choose.  Myspace made it so you could set your profile to private, and not allow anyone to see any of your content unless you were added as their friend.  This is where the bug comes in.  When you are directed to a profile that is private, you are given their default picture, and a message saying you need to be their friend to view their profile.  But there is now a backdoor to get around that.

Clicking on the photo link on a private profile gives unauthorized users this message: “This profile is set to private. This user must add you as a friend to see his/her profile.” But anyone — even those without a MySpace account — can plug the target’s public account number, called a “Friend ID,” into a specially constructed URL that grants access to those photos.

The big issue is, this has been out in the open as a problem since last fall and still nothing has been done about it.  Don’t you think they would have the issue resolved by now?

[Wired]