Apr. 25th, 2007 04:16 pm
Myspace "fixes" spam problem?
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
jackolaWhatever.
The issue with people being phished is simple: a user attempts to click on a link, not realizing it's not actually going to myspace, but a site that looks just like myspace. The page says to log in, so they do, unknowningly giving their password to the phisher. A script the phisher wrote then logs into the account and causes mayhem: posting links back to that login page as well as posting bulletins and comments to websites that undoubtedly makes them money.
MYSPACE FIXED IT... Or did they?
In the past when a site has this problem, they try to EDUCATE users. It has worked for sites like LiveJournal. It's pretty simple: if your address bar doesn't say "myspace.com" then you shouldn't give them your password.
Of course, myspace already has the MOST confusing URL schema EVER, so it's not a surprise that people don't bother to look.
Example:
home = home.myspace.com (if you go there directly, you'll have to keep clicking to get to the actual home)
browse = browseusers.myspace.com
music = music.myspace.com
classifieds = collect.myspace.com???
film = collect.myspace.com??
comedy = myspace.com (no comedy.myspace.com?!?)
OH RIGHT, SO THEY FIXED THE PHISHING PROBLEM.
How'd they do that? They created a NEW domain, and THIS one actually LOOKS LIKE A PHISH URL. This is a sample URL:
http://www.msplinks.com/MDFodHRwOi8vd3d3LmluZHljZGFuZHZpbnlsLmNvbQ==
So now you can't even judge what URL you're clicking on! It's completely transparent... you could be clicking on a porn link, a spam link... a phisher.... we're supposed to assume that they're on top of the phishers, and just trust clicking on the blind link.
The problem with trusting them is that we've never been able to before now, so why should we now? Additionally, I can already see them blocking legitimate links.
Besides, now myspace is completely removing themselves from the social linking aspect of the Internet. When you post a link to something you find interesting, it won't boost that link's page ranking on search engines like google.
Myspace, you have and seemingly always will make the WORST decisions as a web company.
Love,
Jack
The issue with people being phished is simple: a user attempts to click on a link, not realizing it's not actually going to myspace, but a site that looks just like myspace. The page says to log in, so they do, unknowningly giving their password to the phisher. A script the phisher wrote then logs into the account and causes mayhem: posting links back to that login page as well as posting bulletins and comments to websites that undoubtedly makes them money.
MYSPACE FIXED IT... Or did they?
In the past when a site has this problem, they try to EDUCATE users. It has worked for sites like LiveJournal. It's pretty simple: if your address bar doesn't say "myspace.com" then you shouldn't give them your password.
Of course, myspace already has the MOST confusing URL schema EVER, so it's not a surprise that people don't bother to look.
Example:
home = home.myspace.com (if you go there directly, you'll have to keep clicking to get to the actual home)
browse = browseusers.myspace.com
music = music.myspace.com
classifieds = collect.myspace.com???
film = collect.myspace.com??
comedy = myspace.com (no comedy.myspace.com?!?)
OH RIGHT, SO THEY FIXED THE PHISHING PROBLEM.
How'd they do that? They created a NEW domain, and THIS one actually LOOKS LIKE A PHISH URL. This is a sample URL:
http://www.msplinks.com/MDFodHRwOi8vd3d3LmluZHljZGFuZHZpbnlsLmNvbQ==
So now you can't even judge what URL you're clicking on! It's completely transparent... you could be clicking on a porn link, a spam link... a phisher.... we're supposed to assume that they're on top of the phishers, and just trust clicking on the blind link.
The problem with trusting them is that we've never been able to before now, so why should we now? Additionally, I can already see them blocking legitimate links.
Besides, now myspace is completely removing themselves from the social linking aspect of the Internet. When you post a link to something you find interesting, it won't boost that link's page ranking on search engines like google.
Myspace, you have and seemingly always will make the WORST decisions as a web company.
Love,
Jack
![[identity profile]](https://www.dreamwidth.org/img/silk/identity/openid.png){kind=small}
no subject