Anti-social networking: exploiting the trusting environment of Web 2.0

摘要

Social networking has made the web a friendlier, more connected but more complex environment. Sites such as Facebook, MySpace, Orkut, Linkedln and their like have concocted a dangerous cocktail of user-supplied content, open APIs, and web pages heavily loaded with Javascript and embedded media of all descriptions. And it's an environment that is largely devoid of security standards and practices.