| Author |
Message |
lythria_2005
Member
|
# Posted: 1 Sep 2006 01:59
Reply
Hey,
Some of you are on my myspace friends list, and may have noticed that I have, elledgedly, been posting some rather "out of chcaracter" bulletins...
I would like to clearify that these bulletins were NOT posted by myself...I know a number of people who have been having trouble with this issue...
The only thing that it could be is that either the myspace admin are using our accounts as a form of advertising, or someone somewhere is getting hold of certain username/password combinations...
This is highly annoying for me, and those who read these bulletins. As such...I WILL NO LONGER BE POSTING BULLETINS ON MYSPACE...any bulletin that appears to be from me, is not from me...
I have contacted the myspace team...and when I get a responce, I will post it here...
I would be interested to know if anyone else is suffering the same problems...or any other problems with myspace...alot of people on OTF are connected through myspace aswell...so any issues that may cause others discomfort to others...should be appologised for or reported in some way...I feel the best way is through a forum board, such as this one...
I would like to appologise to annoyone who read the bulletins in question...and any responce I recieve from myspace shall be posted below...
Thanks,
Damo
|
maxmeieriii
Member
|
# Posted: 1 Sep 2006 03:04
Reply
As luck may have it, places like MySpace have security issues, and I myself, have seen many OOC bulletins regarding spam like posts.
Chances may have it that bots are slipping in and doing all of this, and I'm fairly certain that the MySpace team is already trying to deal with it. Why the bulletins are posted, I have no clue, since I can't find out why it's happening, but I know it has raised a sreious red flag on their security team.
Also, to highlight another issue, watch out for people who try to add you to your list. I've gotten people requesting to add, only to find out that their profile is a pornographic front, and therefore should be denied without delay.
This, my friends, indeed shows the era of the 'new age' of hackers/phishers, and things of the like. I need not say it, but I will. Be careful out there.
My only suggestion to you all would be to add spaces to your links in the Dossier System:
(ie: kg6eyr AT yahoo DOT com, http COLON SLASH SLASH www DOT myspace DOT com SLASH thegimpster)
You can do that, or do the simpler thing, and just place a "Please Ask" in its place. Safety is rule number one when it comes to online communities, so I urge you to try it this way.
|
lythria_2005
Member
|
# Posted: 1 Sep 2006 06:21
Reply
Yes...I agree totally...BOTs are likely to have been used in these OOC bulletins, and another problem that I have just discovered...It seems that these profiles you are talking about aswell are done by BOT users...basically...the BOTs access your account and then add friends to your friends list...
My advice would be to delete the bulletins in question and the friends that appear...
===IT IS UNLIKELY THAT MYSPACE WILL BE ABLE TO COUNTER THESE BOTs IN THE NEAR FUTURE===
BOTing is highly moddible and thus, whenever MySpace come up with a way to counter them, the BOT makers will merely find loop holes, which are not hard to find in webpages...
The reason I believe the above is because I know people who wrote BOT programs for certain means...and they have prooved, time and time again, that, when it comes to webpages, BOTs are basically undefeatable...
So again, it goes without saying...please be careful...:)...
Damo
|
eagle
Member
|
# Posted: 8 Sep 2006 20:43
Reply
Okay, there are two security issues here and I think they should be clarified.
1. Spam from so-called out of character bulletins, posted by the account of a user whose actual owner did not post them.
2. Bots spamming Myspace accounts with friend requests.
1. This can only be the result of your account having been compromised. There are several ways this could happen. Did you leave your session open on a public computer, such as in a school library? Is your password something common, or something your friends know? Did you enter your account info into one of those layout generators? Some of them might be using your info to post spam.
In any case, bots can't post bulletins for you on your behalf. Period. It's just not possible. If bulletins are popping up from your account that you didn't post, change your password. If it keeps happening, get a new MySpace account, and a better password. This can assist you in creating a strong password.
2. MySpace urls can be lifted from web sites just like e-mail addresses. The steps to avoiding spam for your e-mail apply here. As above, Myspace layout sites can be used as farms for your account information. If you don't want to be spammed, don't use them. If you don't mind, have at.
That said, I've never used one, and don't have my MySpace url posted on any web site. I still get friends request spam. It happens.
Hopefully that clears some things up.
~Eagle~
|
lythria_2005
Member
|
# Posted: 9 Sep 2006 02:22
Reply
erm...firstly eagle...you are right about the password thing...the only way a bot could get access to your myspace is by getting hold of your myspace password...
secondly, bots are capable of posting bulletins on your behalf...all you do is give them a preordaned bulletin. something that has already been written...and then you "tell" them how to post a bulletin and paste that text in...simple...my four year old brother could write a bot that could do that...no offense...
Any half bit, 2nd grade programmer could write a bot for myspace...both to accept friend requests and to post preordaned bulletins...It's not the hardest thing in the world to do...
And Myspace don;t seen to be doing anythign to stop it...lol...
|
eagle
Member
|
# Posted: 9 Sep 2006 14:29
Reply
<!--QuoteBegin--lythria_2005+Sep. 09 2006,02:22--></span><table border="0" align="center" width="95%" cellpadding="3" cellspacing="1"><tr><td><b>Quote</b> (lythria_2005 @ Sep. 09 2006,02:22)</td></tr><tr><td id="QUOTE"><!--QuoteEBegin-->secondly, bots <i>are</i> capable of posting bulletins on your behalf...all you do is give them a preordaned bulletin. something that has already been written...and then you "tell" them how to post a bulletin and paste that text in...simple...my four year old brother could write a bot that could do that...no offense...<!--QuoteEnd--></td></tr></table><span id='postcolor'><!--QuoteEEnd--><br>You misunderstand and underestimate me again, sir. <br><br>I meant that I could not write a bot that would post bulletins that appeared to come from your user name, unless of course I got your password, or taught the bot to hack MySpace. That is what was meant by <i>on your behalf</i>. The program you describe would more accurately be called an agent. <br><br>~Eagle~
|
