Serious Orkut security hole exploited (Google's "myspace", mostly used by brazilians) - GoFuckYourself.com

Jer · 08-14-2006, 09:40 AM

My wife has some big Orkut communities, so she's targetted quite often when people find security holes. In 2005 (I think) someone stole 2 or 3 of her biggest communities. After the guy made the news and was happy, he transfered the communities back to her. Actually my wife made the newspapers too.
Google/Orkut didn't help her or any other user who got communities

Yesterday she was in her Orkut profile and clicked the "scraps" link to read the messages people send to her, but she got redirected to a page hosted on yahoo with something like "thanks for posting in our guestbook"... seconds after this she noticed the two biggest communities were gone and as time was passing by, all her other communities were gone too

Now she can't even login anymore, I don't know if it's related with this or not.

I have no idea if the "scraps" thing works only when she clicks it or when someone else clicks her profile too. If it's the second option Orkut will be a chaos soon. The other time was a link INSIDE her profile, targetted to transfer 2 of her communities.

Other people got their communities stolen yesterday as well.

I know almost everyone here don't care at all and I don't know why I'm posting this here.

Damian_Maxcash · 08-14-2006, 09:46 AM

Ive come accross that site a few times - I never understood why Google didnt expand it - it was even around before MySpace I think

Jer · 08-14-2006, 10:02 AM

Quote:

Originally Posted by damian2001

Ive come accross that site a few times - I never understood why Google didnt expand it - it was even around before MySpace I think

Can you image if it was big in USA like myspace and crap like this happened?

fuzebox · 08-14-2006, 10:24 AM

Quote:

Originally Posted by damian2001

Ive come accross that site a few times - I never understood why Google didnt expand it - it was even around before MySpace I think

It was around yearssss before MySpace, but not marketed very well at all (for starters you had to be invited by someone already in the community).

Klen · 08-14-2006, 10:26 AM

I still dont understud how myspace become so popular.I am member of myspace from begging,when only few members it has.And now is site number 5 in world.A lot of people try to copy myspace success but nobody even close.

scottybuzz · 08-14-2006, 10:37 AM

yeh myspace is huge, unlucky jer

Acne · 08-14-2006, 10:40 AM

Quote:

Originally Posted by KlenTelaris

I am member of myspace from begging,when only few members it has.

fris · 08-14-2006, 10:53 AM

orkut launched after the success of friendster. its invite only i am pretty sure still. i never really liked it that much.

HpicAnn · 08-14-2006, 12:15 PM

It Sucks when other people shitting on you!

Jer · 08-14-2006, 03:46 PM

Quote:

Originally Posted by Fris

orkut launched after the success of friendster. its invite only i am pretty sure still. i never really liked it that much.

Yes, it is invite only.

I don't have a profile on it since I waste much time on other stuff

Jer · 08-14-2006, 03:51 PM

People are still exploiting the first bug... looks like Google didn't fix it.
I still have the code of the first one saved in my computer. I didn't see yesterday's security hole, else I could try to understand how it's done and contact yahoo (if they're using them to steal the communities). Well, Yahoo probably likes it.

my wife told me there are communities where people post how to steal other communities... bah.

dullspace · 08-14-2006, 04:20 PM

Hack the planet.

germ · 08-14-2006, 06:31 PM

Quote:

Originally Posted by dullspace

Hack the planet.

slapass · 08-14-2006, 07:28 PM

Quote:

Originally Posted by Jer

People are still exploiting the first bug... looks like Google didn't fix it.
I still have the code of the first one saved in my computer. I didn't see yesterday's security hole, else I could try to understand how it's done and contact yahoo (if they're using them to steal the communities). Well, Yahoo probably likes it.

my wife told me there are communities where people post how to steal other communities... bah.

That sucks! Google is just ignoring something that could be bigger then their China internet investment if handled right.

08-14-2006, 09:40 AM	#1
Jer God is Brazilian Join Date: Feb 2001 Location: Brazil Posts: 10,601	Serious Orkut security hole exploited (Google's "myspace", mostly used by brazilians) My wife has some big Orkut communities, so she's targetted quite often when people find security holes. In 2005 (I think) someone stole 2 or 3 of her biggest communities. After the guy made the news and was happy, he transfered the communities back to her. Actually my wife made the newspapers too. Google/Orkut didn't help her or any other user who got communities Yesterday she was in her Orkut profile and clicked the "scraps" link to read the messages people send to her, but she got redirected to a page hosted on yahoo with something like "thanks for posting in our guestbook"... seconds after this she noticed the two biggest communities were gone and as time was passing by, all her other communities were gone too Now she can't even login anymore, I don't know if it's related with this or not. I have no idea if the "scraps" thing works only when she clicks it or when someone else clicks her profile too. If it's the second option Orkut will be a chaos soon. The other time was a link INSIDE her profile, targetted to transfer 2 of her communities. Other people got their communities stolen yesterday as well. I know almost everyone here don't care at all and I don't know why I'm posting this here.

08-14-2006, 10:37 AM	#6
scottybuzz Too lazy to set a custom title Industry Role: Join Date: May 2006 Location: NY Posts: 14,800	yeh myspace is huge, unlucky jer __________________ $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$

08-14-2006, 10:53 AM	#8
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	orkut launched after the success of friendster. its invite only i am pretty sure still. i never really liked it that much. __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

08-14-2006, 12:15 PM	#9
HpicAnn Confirmed User Join Date: Mar 2005 Posts: 4,319	It Sucks when other people shitting on you! __________________ GiVe YoU a BiG......... tImE Best Converting Webmaster Programs! All Niches Covered! [email protected] IcQ: 226461222

08-14-2006, 04:20 PM	#12
dullspace Confirmed User Join Date: Jul 2006 Posts: 131	Hack the planet. __________________ SIG TOO BIG! Maximum 120x60 button and no more than 3 text lines of DEFAULT SIZE and COLOR. Unless your sig is for a GFY top banner sponsor, then you may use a 624x80 instead of a 120x60.

08-14-2006, 09:46 AM	#2
Damian_Maxcash So Fucking Banned Join Date: Oct 2002 Location: MaxCash.com Posts: 12,745	Ive come accross that site a few times - I never understood why Google didnt expand it - it was even around before MySpace I think

08-14-2006, 10:26 AM	#5
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	I still dont understud how myspace become so popular.I am member of myspace from begging,when only few members it has.And now is site number 5 in world.A lot of people try to copy myspace success but nobody even close.

08-14-2006, 03:51 PM	#11
Jer God is Brazilian Join Date: Feb 2001 Location: Brazil Posts: 10,601	People are still exploiting the first bug... looks like Google didn't fix it. I still have the code of the first one saved in my computer. I didn't see yesterday's security hole, else I could try to understand how it's done and contact yahoo (if they're using them to steal the communities). Well, Yahoo probably likes it. my wife told me there are communities where people post how to steal other communities... bah.