SE’s Weblog

The security firm Fortify Software has warned against a series of attacks against Facebook and MySpace. Buffer overflows that enabled hackers to exploit the Aurigma ActiveX image uploading software used by social networking sites were at the heart of the assault. ‘Criminal hackers now view social networking sites as their best target for attacks … [partially because] such sites are designed to be usable by “unsophisticated” consumers, meaning that the barrier to entry for attacks is potentially lower as users are more likely to click on a link that leads to malware.