From Slashdot:
“One clever MySpace user looking to expand his buddy list recently figured out how to force others to become his friend, and ended up creating the first self-propagating cross-site scripting (XSS) worm. In less than 24 hours, ‘Samy’ had amassed over 1 million friends on the popular online community…Thankfully, the script was written for fun and didn’t try to take advantage of unpatched security holes in IE to create a massive MySpace botnet.”
Wade Rockett 