Alternative music reviews

September 5, 2006

MySpace Private Profiles Are Not Private

Filed under: ramblings — @ 12:33 am Comments (6)

[Update]
Looks like it is now fixed (November 2006)
[/Update]
Unlike the recent story on The Register, this is a genuine problem with MySpace profiles set to private. This option of privacy used to available to young teens but has recently become possible for any user to set their profiles to Private. The problem is that this privacy protection is flawed. Let’s see what I can find out in an hour of browsing:

(public)14 year old female from New Jersey set to Private Profile.

I know she was 16 on January 7th.

(public). 70 old woman from New Jersey – but not that age from the photo

I know she went to see Godsmack/Rob Zombie on the 4th September and her 8th Grade Dance was in June.

(public)Amanda – 38 years old but obviously much younger from the photo.

I know she was 14 on the 6th August and is friends with Madison and Lindsay.

(public) 32 year old female from Placentia, California.

I know her daughter is just about to enter 7th grade. She took a survey that said she had a sexual IQ of 120. To quote “When it comes to sex, you are a super genius”.

These details are available to any blog search engine including Google Blog Search. Most Blog Search Engines read the RSS feed from blogs. MySpace publishes blog post summaries (the first 200 characters of any post) for anyone to see – irrespective of the Privacy settings.

All you have to do to see the first 200 character of any blog entry is add the FriendID to this url: http://blog.myspace.com/blog/rss.cfm?friendID=(id).

6 Comments

  1. Hmmm…it didnt work for me.

    Comment by SBee — September 5, 2006 @ 3:37 am

  2. I’ve added an example to the post.

    Comment by Cool Noise — September 5, 2006 @ 9:09 am

  3. presumably you have notified myspace?

    Comment by eyekonic limited edition organic t-shirts — September 7, 2006 @ 5:50 pm

  4. Yes, I emailed privacy@myspace and raised it on the site forum. Not sure if either of these channels get taken notice of though.

    Comment by Cool Noise — September 7, 2006 @ 6:09 pm

  5. It looks like myspace fixed this one. Keep up the good work, and publish how to overcome their “fix”. We need to keep our children safe.

    Comment by hagenfun — September 8, 2006 @ 5:06 am

  6. My example above still works so I don’t think they have fixed it.

    Comment by Cool Noise — September 8, 2006 @ 8:56 am

Leave a comment