MySpace was working to fix a security hole on Monday that allows people to see private comments friends have written on members’ pages. “MySpace is committed to keeping all users as safe and secure as possible. MySpace was alerted to an issue within the MySpace Mobile WAP site and is working to roll out an immediate fix,” a MySpace spokesperson wrote in an e-mail.
With the MySpace hole, people have to go through the company’s mobile page and know the user ID of a member to read their private comments, said Canadian computer technician Byron Ng, who alerted CNET News to the issue and said he had previously contacted MySpace as well. Getting someone’s user ID is easy; just hover over the name and the user ID is the first group of numbers buried in the coding at the bottom of the page.
Those sites allow MySpace members to embed HTML code in their profile pages that reports back to the tracking sites so members can see who was viewing their pages. This only works with MySpace and not Facebook, however, because MySpace allows members to use HTML in their profiles and Facebook does not, NG said.