Orkut Turned Upside Down

When i thought Orkut is much safer now...Another Orkut Security Hack came forward..

Yesterday a person took his revenge from Orkut...I would not share any Information about this Hacker..
There is a vurnability in Orkut, it's not a technical vulnerability, rather a human one. Orkut has some employees called as Customer Experience Representative's and other content monitoring staff. That person acquired access to details using social engineering techniques like cookie stealing and phishing. For example today, a person got access to the account of the representative and deleted many communities, most of them hate communities. Along with it, the "Stanford University" community(The first community in orkut) was also deleted.
Although Orkut restored there community..

He said that he had deleted that community Because Orkut have deleted his previous Profile..He was taking revenge..He also deleted all the Hate India communities..




Just before he did all this he scraped Orkut Buyukkokten and said orkut to make him certified or he will hack Orkut server...In return Orkut deleted his profile as a result he Hacked one of the administrator of Orkut Shaon RC and through his account he deleted those communities...

so if somone gets a google employ id
he can delete any community or change discription of any community

In return for all these Orkut took revenge by deleting a lot of Profiles..Most of the people talking about this Stuff also got there account deleted by Orkut..Along with that Orkut also targeted communities and deleted lots of them.After that The person tried to hack all the Orkut certified peoples account...By sending them a cookie stealing script..In return Orkut took away the administration rights from a lot of Profiles...
Poor people !!

It might be possible that a lot of people have access to Orkut administrators account...Because it has been noticed many times that people on Orkut challenged that tomorrow these communities would be deleted and they actually did deleted them without getting any access to the Owner of the community..

Suggestions :
Orkut should add a special pin code thing
which is not password [password can be guessed]
which administrators have to enter before they can delete any community or profile.
and that pin code must not be used anywhere else.

Purpose Of this Post :
The main purpose of this post is that the real mistake is not of the person who Hacked Orkut..But is of the Orkut himself..
I would suggest Orkut not to take any more revenge from that Guy...Although he showed himself a little immature by openly Challenging Orkut (Orkut can have him jailed for that !).

many people till now who have talked much about this have had there account deleted I just hope Orkut doesn't do that with me...
as i have seen my self peoples profiles deleted...One person claimed that Orkut has deleted his Profile 5 times in just three minutes...

We should all go to Google's security page and inform google about these kind of leaks :
http://www.google.com/security.html

Update :

Here Is what one Orkut User who was an eye witness had to say about the event :

Anyone that was online and active in the community at the time can verify this. The person had come in with a fake profile (after changing our comm. description to prove that he did indeed have access to an admin account), and then asked us to help him find objectionable communities since he was not sure how long the cookie would last.
People online saw the communities posted there disappear one by one. Coincidence? I seriously doubt the odds against that one...
However, people that were present KNOW the truth. That Orkut is NOT an indomitable fortress as they might want to pretend.They were compromised. All that is left is whether they are willing to admit it or not before we can suggest ways for them to fix it...

This is what another person said :

The Hacker is not to be blamed...He did the right by deleting all those Hatred communities..He did what Orkut should have done before....

Well yeah Orkut should spare him and should delete all those hatred communities...
You can still find a lot of Hatred communities Here