Serious Orkut security hole exploited (Google's "myspace", mostly used by brazilians)
 

My wife has some big Orkut communities, so she's targetted quite often when people find security holes. In 2005 (I think) someone stole 2 or 3 of her biggest communities. After the guy made the news and was happy, he transfered the communities back to her. Actually my wife made the newspapers too.
Google/Orkut didn't help her or any other user who got communities

Yesterday she was in her Orkut profile and clicked the "scraps" link to read the messages people send to her, but she got redirected to a page hosted on yahoo with something like "thanks for posting in our guestbook"... seconds after this she noticed the two biggest communities were gone and as time was passing by, all her other communities were gone too :( Now she can't even login anymore, I don't know if it's related with this or not.

I have no idea if the "scraps" thing works only when she clicks it or when someone else clicks her profile too. If it's the second option Orkut will be a chaos soon. The other time was a link INSIDE her profile, targetted to transfer 2 of her communities.

Other people got their communities stolen yesterday as well.

I know almost everyone here don't care at all and I don't know why I'm posting this here.

Ive come accross that site a few times - I never understood why Google didnt expand it - it was even around before MySpace I think

Can you image if it was big in USA like myspace and crap like this happened?

It was around yearssss before MySpace, but not marketed very well at all (for starters you had to be invited by someone already in the community).

I still dont understud how myspace become so popular.I am member of myspace from begging,when only few members it has.And now is site number 5 in world.A lot of people try to copy myspace success but nobody even close.

yeh myspace is huge, unlucky jer

orkut launched after the success of friendster. its invite only i am pretty sure still. i never really liked it that much.

It Sucks when other people shitting on you!

Yes, it is invite only.

I don't have a profile on it since I waste much time on other stuff

People are still exploiting the first bug... looks like Google didn't fix it.
I still have the code of the first one saved in my computer. I didn't see yesterday's security hole, else I could try to understand how it's done and contact yahoo (if they're using them to steal the communities). Well, Yahoo probably likes it.

my wife told me there are communities where people post how to steal other communities... bah.

Hack the planet.

:1orglaugh :1orglaugh :1orglaugh

That sucks! Google is just ignoring something that could be bigger then their China internet investment if handled right.