http://en.wikipedia.org/wiki/Myspace#Security

Security

In October 2005, a flaw in the MySpace's site design was exploited by a user only known as "Samy" to create the world's first self-propagating cross-site scripting (XSS) worm. MSNBC has also reported that MySpace is a "hotbed" for spyware, and that infection rates are rising because of MySpace.[23] In addition to this, the customisation of user pages currently allows the injection of certain HTML which can be crafted to form a phishing user profile.[24] More recently, there has been spam on bulletins that has been the result of phishing. Users find their MySpace homepage with bulletins they didn't post, realising later they had been phished. The bulletin consists of an advertisement that provides a link to a fake login screen, tricking people into typing in their MySpace e-mail and password.

Other security fears regarding profile content itself are also present. For example, the embedding of videos inherently allows all of the format's abilities and functions to be used on a page. A prime example of this surfaced in December 2006, when embedded QuickTime videos were shown to contain hyperlinks to JavaScript files, which would be run simply by a user visiting an 'infected' profile page, or even in some cases by simply viewing a user's 'about me' elsewhere on the site. Users who entered their login information into a fake login bar that appeared would then become 'infected', and their account would be used to spam other members, thus spreading the infection.[25]

In April 2007, a house in the UK was wrecked by gatecrashers storming a party after reading an invite for it on MySpace. The party caused an estimated £20,000 worth of damage, forcing the family to move out after graffiti was sprayed on walls and light fixtures were ripped out. Rachel Bell, the organiser of the party, claimed that her account was hacked and she only expected a small number of people to turn up. The resulting situation required several police cars and a dog-handling unit in order to restore peace.[26]

Child safety

The minimum age to register an account on MySpace is 14.[27] Profiles with ages set to 14 or 15 years are automatically private. Users whose ages are set at 16 or over have the option to restrict their profiles and the option of allowing certain personal data to be restricted to people other than those on their friends list. Accessing the full profile of, or messaging someone when their account is set to "private" (or if under sixteen) is restricted to a MySpace user's direct friends. However, this does not work as children can misrepresent their ages to bypass restrictions.

MySpace often has problems with profile identity theft. These are profiles containing the pictures and sometimes information of someone else's profile. These stolen profiles are commonly used to advertise websites. MySpace will delete these profiles if the victim verifies their identity and points out the profile via e-mail.[28]

myspace is too weird