It’s a season of celebrations for some of the lucky orkut users and some really cool suggestions for the orkut team, but beware of some traps that Orkut has accidentally left for you which might result in compromising your account to someone, you don’t even know..

Still fishing? Okay..All the credit for this security risk goes to the MiniBirthday Feature of orkut which displays the Upcoming Birthdays of your friends on your Home Page.

Actually, This feature has it’s very own page which when opened lists all your friends upcoming birthdays. Not to miss, your very own Authentication ID* on the Navigation Bar of your Browser. Well, anyone can steal that very good looking Authentication ID and login into your Orkut Account withut the need of your username and password.

*Authentication ID is a kind of “key” generated when you login that opens up the “lock” of Orkut.

Using this link anyone with some good knowledge of XSS can steal your “key”. Not to take credits away from malicious “useful looking” softwares and scripts in orkut communities and scraps.
» Want to experience and see what’s your authentication code looks like?

• Navigate to the link given below and check your browsers navigation bar to see your authentication code
• http://www.orkut.com/MiniBirthday.aspx

» Precautions

Gaurav Kalra – Upcoming Orkutter – 8 Points
Gaurav has written 8 Articles, posted 2 Comments.