Categories

BitTorrent
Conferences
Direct Revenue
Julie Amero
Myspace
Podcasts
Postbag
The Big Ones
The Fourth Wall
Yapbrowser
Zango

Creative Commons License
All articles licensed
under a Creative
Commons License
.
 








Home | About me | Press | The Fourth Wall | Links

Tuesday, May 22, 2007

Myspace Outsourcing Security Handling?

Here's a timeline (minus the time, so it's actually more of a line...except there's no line, either. You can't have everything):

1) Myspace groups are buried in pictures of bums, boobs and, er, poo. Note the David Taylor guy. He's important.

2) David Taylor sets up this blog about Myspace security stuff.

3) David Taylor gets fed up and tells people not to use Myspace anymore, possibly while going down on his knees and yelling RE-BE-CCAAAAAAAAAAAAAAAA, Resident Evil style.

4) David Taylor find his Myspace page has been kicked squarely in the yarbles and banned. The super sexy twist is that he apparently had someone looking at his blog posting from the Myspace Admin tool shortly before being whacked. Notable quote time:

"Someone was referred to this blog from admintool.myspace.com

021 http://admintool.myspace.com/index.cfm 1 0 1 19-May-2007 01:42

I don't think I am being paranoid at all!!! Myspace admins viewed my blog at 1:42 AM on the 19th and then deleted my account! The proof is in the headers. This is clearly retaliation for speaking out!

An IP address from:
OrgName: Twentieth Century Fox
OrgID: TCF-1
Address: 10201 West Pico Boulevard
City: Los Angeles
StateProv: CA
PostalCode: 90035
Country: US

MySpace is owned by News Corporation, which owns 20th Century Fox film studios and the FOX TV networks"

.....it's not exactly up there with the figure on the grassy knoll, but I'm sure Mulder and Scully would take it seriously. His music profile was flagged as "violating the terms of service", and that was that. His Myspace URL was then suddenly snapped up by some random Myspace user, in the form of some dude from Mexico - which obviously prevented him from being able to get his account page back.

It's safe to say that this pretty much sucks, so far.

At this point, my mate LoLo does some digging and finds out that at least some security related tasks on Myspace are handled by......some randomly outsourced agency!

Step forward, Ultimate Staffing! From the job advert:

Relevant Work Experience: 1+ to 2 Years
Career Level: Entry Level
Education Level: Some College Coursework Completed

...anyone else twitchy yet? It gets scarier:

"MySpace is currently partnering with Ultimate Staffing to bring to you career opportunities. Come be a part of this dynamic, cool and exciting company!!!!"

Top tip - avoid any job advert where they end a sentence with four exclamation marks. Finally, we get to the money shot....your work related duties. Remember, these are the people supposedly able to deal with cross site scripting attacks, Quicktime Worms, Profile Watchers and God knows what else:

"Duties include overseeing spam complaints, removing infringing EBay auctions that misuse the company trademark, removing phishing sites, pursuing spammers and handling hacking complaints."

There's a voice in my head, and it says HAHAHAHAHAHAHAHAHAHAHAHAHA. How on Earth anybody is supposed to deal with the kind of insantity currently bouncing across Myspace with a vague, sort of general all-round-but-not-specific experience in security is beyond me. Maybe it's just me being paranoid, but in my humble opinion you simply CANNOT just grab some dudes from an agency's recruitment books then stick them into a position like that. Especially as there are now people with enough weirdly coincidental evidence that some trigger-happy jobsworth saw someone bitching at Myspace then decided to whack their profile to shut them up.

On top of everything else, this is most definitely not the kind of problem Myspace need right now.

But hey, here's my profile (warning, music). Go nuts, kids. I dare you. I double dare you. Or, you know, just post fifty foot sparkly banners of dancing bananas. Whatever you feel like.

Labels:

All Content © Vitalsecurity.org 2006. The content of this site is entirely the opinion of Paperghost, and is in no way endorsed by FaceTime Communications. In other words - have a problem, come see me.