Student found Myspace security flaw
Password
chopping
By Nick Farrell: Monday 21 August 2006, 17:13
A UK STUDENT has stumbled on what he thinks is a flaw in Myspaces
password system.
A source close to an AV outfit said that he stumbled on the flaw
when he mistyped his password.
Writing in his bog, now removed, the lad said that he typed it in
wrong, but still managed to log in. He discovered that if you drop
the last character from your password it will still let you login
happily also if you have entered the entire password correctly then
you can have absolutely anything else after that and it will still
log you in.
The boy thought it was odd that Myspace truncated the password, and
seems to think it would be easier for someone to hack into your
account.
Unfortunately, the bog is now deceased. The flaw may still remain.
µ
