NEWS: MySpace, Apple in patch snafu

News/Social Networks/Myspace/Joris Evers
Found on: CNET.com

In response to the worm attack that hit MySpace over the weekend, the social networking site has made available a security update. Here's where it gets really, really lame: Myspace users are being told to go to a generic MySpace.com page via a message that appears on their home page from Tom (one of the co-founders) -- what gives?

CNET post:

Where do you go to get security updates for QuickTime? Apple Computer, you say? Wrong! This week, the answer would be MySpace.com. After a worm attack hit the social-networking Web site, Apple provided MySpace with a fix for the media player, which was distributed on the MySpace site.

Both companies demonstrated how not to deliver a patch, say CNET News.com's Joris Evers and CNET.com's Robert Vamosi in this week's Security Bites podcast. It's especially bad since the MySpace worm attack, while not the first, is another sign that attackers are looking to exploit such Web 2.0 sites.