These simple coding errors of these sites have been alarming considering that extent to which the social networks have been for reassuring their users that the data would be safe. This problem also involved the way these sites have handled the requests for data from some other domains, which are known as cross domain policy.

The sites like MySpace and Facebook have typically blocked the other domains from requesting and also receiving data for the privacy reasons, except for the own vetted subdomains of these web sites.

Facebook has also disallowed the access from any other applications on the main domain, but one developer in Netherlands, named Yvo Schaap, has found that the Facebook would be allowing the data to be given out of one of its subdomains.

Since this subdomain has also hosted all of data of Facebook, it will be possible for stealing this data by luring one victim to the URL with Flash application rigged to grab that data if the victim had the auto login enabled, which is mostly done by people, as according to the Schaap's blog.