Time Magazine recently bestowed its prestigious "Person of the Year" honor on "You," recognizing the growing social importance of community and collaboration on the web. YouTube, MySpace, Wikipedia, Bebo and hundreds of other websites that rely on user-contributed content and which are broadly referred to as "Web 2.0" have officially become mainstream. While the explosion in the popularity of Web 2.0 sites has changed the way we communicate and use the web, it has also created an irresistible target for malware authors. As more and more users go online to take advantage of Web 2.0 applications ? like social-networking sites, blogs, and wikis ? malware authors are right behind them, opening up yet another front in the constant cat-and-mouse game between security defenses and hackers. In October 2005, one creative MySpace user unleashed the Samy worm, a cross-site scripting worm that allowed him to add one million users to his "friends" list. While the damage was limited, the implications of the Samy worm were huge.
More...