Two hackers are planning to fill April's calendar with a month's worth of MySpace vulnerabilities — if the project isn't an April Fools' Day prank.
The pair, known only as Mondo Armando and Mustachio, revealed their plans Thursday on a LiveJournal post, saying the purpose of their project is "to highlight the monoculture-style danger of extremely popular websites populated by users of various levels of sophistication."
The duo also referenced convicted MySpace hacker Samy Kamkar by commenting, "Also, Samy is my hero" in their Friday post.
A MySpace representative could not immediately be reached for comment.
Andrew Storms, director of security operations at nCircle, told SCMagazine.com today that the project could be an elaborate April Fools’ Day joke.
"Quite honestly, from the information I’ve been reading, the level of professionalism compared to the other [month-long bug projects] is just not up to pace with the other guys," he said.
And while he thinks month-long vulnerability projects are beneficial, Storms said he’d like to see hackers give vendors and software creators advance warnings on the release.
"I think the best thing to say is that ideally we’d like to see these continue, but in a more organized fashion," he said. "It would be nice [for hackers] to give their 30 bugs to MySpace this week, so at least it would give the vendors a heads-up, as well as the security operations, so they could say, ‘We knew it was coming.’ Then they could release the bugs every day."
Click here to email Online Editor Frank Washkuch Jr.