{{Cleanup|date=February 2009}}

{{Infobox Website

| name ='''Orkut'''

| logo = [[Image:Orkut.png|241px|center]]

| screenshot = [[Image:Orkut - login.png|220px]]

| caption = The new Orkut interface

| url = http://www.orkut.com/

| commercial = Yes

| type = [[Social Network Service]]

| language = [[Portuguese language|Portuguese]]

[[English language|English]]

[[Spanish language|Spanish]]

[[French language|French]]

and other 39 languages

| registration = required

| owner = {{flagicon|USA}} [[Google]]

| author = {{flagicon|Turkey}} [[Orkut Büyükkökten]]

| launch date = 22 January 2003

| current status = Active

| revenue =

| slogan = Who do you know?

| alexa = 67<ref>http://www.alexa.com/data/details/traffic_details/orkut.com</ref>

}}

'''Orkut''' is a [[social networking service]] which is run by [[Google]] and named after its creator, an employee of Google - [[Orkut Büyükkökten]]. The service states that it was designed to help users meet new friends and maintain existing relationships. Orkut is similar to other [[List of social networking sites|networking sites]]. Since October 2006, Orkut has permitted users to create accounts without an invitation.

Orkut is the most visited website in [[Brazil]] and second most visited site in [[India]]. A large percentage of users in India are high school and college students. The initial target market for Orkut was the United States, but the majority of its users are in Brazil and India.<ref>{{cite web

| title = Why Google Turned Into a Social Butterfly

| publisher = The New York Times

| date = November 4, 2007

| url = http://www.nytimes.com/2007/11/04/technology/04digi.html?ref=business

| accessdate = 2007-11-07 }}</ref> In fact, as of May 2008, 53.86% of Orkut's users are from [[Brazil]], followed by India with 16.97%<ref>{{cite web

|url=http://www.orkut.co.in/MembersAll.aspx

|title=Orkut Demographics

|publisher=orkut

|accessdate=2008-06-01}}</ref> and 23.4% of the traffic comes from [[Brazil]], followed by India with 18.0%.<ref>{{cite web

|url=http://www.alexa.com/data/details/traffic_details/orkut.com

|title=Traffic Details for: orkut.com/

|publisher=Alexa

|accessdate=2008-07-19}}</ref> In 2008, more than 23 million of Brazilians had an account on orkut.<ref>[http://www1.folha.uol.com.br/folha/informatica/ult124u361596.shtml]</ref>

Originally hosted in [[California]], in August 2008 Google announced that Orkut will be fully managed and operated in [[Brazil]], by Google Brazil, in the city of [[Belo Horizonte]]. This was decided due to the large Brazilian user base and growth of legal issues.<ref>[http://www1.folha.uol.com.br/folha/informatica/ult124u430818.shtml Folha Online - Informática - Orkut passa para as mãos do ; empresa muda diretoria no país - 07/08/2008<!-- Bot generated title -->]</ref><ref>[http://g1.globo.com/Noticias/Tecnologia/0,,MUL715477-6174,00-FILIAL+BRASILEIRA+DO+GOOGLE+VAI+ASSUMIR+CONTROLE+MUNDIAL+DO+ORKUT.html G1 > Tecnologia - NOTÍCIAS - Filial brasileira do Google vai assumir controle mundial do Orkut<!-- Bot generated title -->]</ref><ref>http://info.abril.com.br/aberto/infonews/082008/07082008-23.shl</ref><ref>[http://www.estadao.com.br/tecnologia/not_tec219549,0.htm Estadao.com.br :: Tecnologia:: Google Brasil assumirá o controle mundial do Orkut<!-- Bot generated title -->]</ref>

==History==

Orkut was launched on [[January 22]], [[2003]] by Google as independent project of [[Orkut Büyükkökten]], a [[Turkey|Turkish]] software engineer. The community membership was originally by invitation only. At first year, [[United States]] had the largest user base. By [[word of mouth]] various [[Brazil]]ians began adopting and inviting more friends, in a viral driven by the [[blogosphere]]. Soon after, Brazil surpassed U.S. in number of users and orkut started becoming heavily popular in Brazil. Americans then started leaving the service and switching to other similar sites such as [[MySpace]] and [[Friendster]]. This phenomenon was covered by the English blogosphere with some criticism towards Brazilians.<ref>http://slashdot.org/article.pl?sid=04/07/17/2243232</ref><ref>http://www.boingboing.net/2004/07/18/brazilians-outnumber.html</ref><ref>http://community.livejournal.com/blog_sociology/90186.html</ref>

From that time, orkut growth was driven by Brazilian users, first being opened to everyone by register and becoming the most popular website in Brazil. The creator [[Orkut Büyükkökten]] visited [[Brazil]] in 2007,<ref>http://info.abril.com.br/aberto/infonews/042007/02042007-9.shl</ref> in attempt to understand the success in that country. In 2007 orkut began attracting large amount of [[India]]ns who were not intimidated by number of Brazilians on the site. As for now, orkut also has a simplified site for mobile users. 'm.orkut.com'. In 2008, a new feature was introduced for users having slow internet connections to access orkut using the 'View orkut in lighter version' setting. Soon Orkut emerged as the No. 1 social networking website in the industry, It was claimed that Google makes in turn profit from Orkut, with AdSense Revenue generation system.

==Features==

{| class="wikitable" style="width:300px; float:right; font-size:85%; margin:0.25em 0 1em 1em;"

|! colspan="4" style="font-size:117.6%;" | '''Users ranking by country'''

|- style="background:#EEEEEE;"

|! colspan="4" style="font-size:117.6%;" | '''Demographics of Orkut on March 31, 2004<ref>[http://buzzine.info/marketinghacker/index.php?itemid=2999 Demographics of Orkut by country]</ref>

|- style="background:#EEEEEE;"

| [[Image:Flag of the United States.svg|30px]] || [[United States]] || <div style="width:51.36px; height:1em; background:blue; border:1px solid black;"/> || 51.36%

|- style="background:#DDDDDD;"

| [[Image:Flag of Japan.svg|30px]] || [[Japan]] || <div style="width:7.74px;

height:1em; background:white; border:1px solid black;"/> || 7.74%

|- style="background:#EEEEEE;"

| style="width:50px;" | [[Image:Flag of Brazil.svg|30px]] || [[Brazil]] || style="width:100px;" | <div style="width:5.16px; height:1em; background:yellow; border:1px solid black;"/> || 5.16%

|- style="background:#DDDDDD;"

| [[Image:Flag of the Netherlands.svg|30px]] || [[Netherlands]] || <div style="width:4.10px; height:1em; background:orange; border:1px solid black;"/> || 4.10%

|- style="background:#EEEEEE;"

| [[Image:Flag of the United Kingdom.svg|30px]] || [[United Kingdom]] || <div style="width:3.72px; height:1em; background:red; border:1px solid black;"/> || 3.72%

|- style="background:#DDDDDD;"

|----

|! colspan="4" style="font-size:117.6%;" | '''Demographics of Orkut on December 9, 2008'''

|- style="background:#EEEEEE;"

| style="width:50px;" | [[Image:Flag of Brazil.svg|30px]] || [[Brazil]] || style="width:100px;" | <div style="width:51.18px; height:1em; background:yellow; border:1px solid black;"/> || 51.02%

|- style="background:#DDDDDD;"

| [[Image:Flag of India.svg|30px]] || [[India]] || <div style="width:17.40px; height:1em; background:#ff9933; border:1px solid black;"/> || 17.54%

|- style="background:#DDDDDD;"

| [[Image:Flag of the United States.svg|30px]] || [[United States]] || <div style="width:17.46px; height:1em; background:blue; border:1px solid black;"/> || 11.35%

|- style="background:#EEEEEE;"

| [[Image:Flag of Pakistan.svg|30px]] || [[Pakistan]] || <div style="width:1.01px; height:1em; background:green; border:1px solid black;"/> || 14.00%

|- style="background:#EEEEEE;"

| [[Image:Flag of Afghanistan.svg|30px]] || [[Afghanistan]] || <div style="width:1.01px; height:1em; background:green; border:1px solid black;"/> || 0.49%

|- style="background:#EEEEEE;"

| [[Image:Flag of the United Kingdom.svg|30px]] || [[United Kingdom]] || <div style="width:0.49px; height:1em; background:red; border:1px solid black;"/> || 0.48%

|- style="background:#DDDDDD;"

| [[Image:Flag of Japan.svg|30px]] || [[Japan]] || <div style="width:0.43px; height:1em; background:white; border:1px solid black;"/> || 0.43%

|- style="background:#DDDDDD;"

| [[Image:Flag of Portugal.svg|30px]] || [[Portugal]] || <div style="width:0.39px; height:1em; background:crimson; border:1px solid black;"/> || 0.40%

|- style="background:#EEEEEE;"

| [[Image:Flag of Germany.svg|30px]] || [[Germany]] || <div style="width:0.39px; height:1em; background:chrome; border:1px solid black;"/> || 0.40%

|- style="background:#DDDDDD;"

| [[Image:Flag of Australia.svg|30px]] || [[Australia]] || <div style="width:0.39px; height:1em; background:crimson; border:1px solid black;"/> || 0.39%

|}

A user first creates a "Profile", in which the user provides "Social", "Professional" and "Personal" details. Users can upload photos into their Orkut profile with a caption. Users can also add videos to their profile from either [[YouTube]] or [[Google Video]] with the additional option of creating either restricted or unrestricted polls for polling a community of users.There is an option to integrate [[GTalk]] (An instant messenger from Google) with Orkut enabling chatting and file sharing.

===Scrapbook===

"Scrapping" is popular among the Orkut community as a form of offline and online communication. In December 2007, the ability to pop up alerts immediately when a scrap is received was added. The scrap feature is sometimes used for chatting.

===Communities===

Another feature of Orkut are "[[Communities]]". Anyone with an Orkut account can create a community on anything. One can post topics, inform users about an event, ask them questions or just play games. There are more than one million communities on Orkut with topics ranging from pizza to pasta. The first five communities on Orkut were started within 24 hrs of the site's launch. There were a total of 47,092,584 communities on Orkut as per March 24, 2008 4:25PM IST (+5:30 GMT). With the recent addition of the search topic feature in the communities, some Orkut communities become the in fact source for the website links to movies, e-books etc. A community's members may also create polls, and invite other members.

===Other miscellaneous features===

Members can make groups to join friends according to their wishes. Further, each member can become fans of any of the friends in their list and can also evaluate whether their friend is "Trustworthy", "Cool", "Sexy" on a scale of 1 to 3 (marked by icons) and is aggregated in terms of a percentage. Unlike [[Facebook]], where a member can view profile details of people only on their network, Orkut allows anyone to visit anyone's profile, unless a potential visitor is on your "Ignore List" ('''Note:''' This feature has been recently changed so that users can choose between showing their profile to all networks or specified ones). Importantly, each member can also customize their profile preferences and can restrict information that appear on their profile from their friends and/or others (not on the friends list). Another feature is that any member can add any other member on Orkut to his/her "Crush List" and both of them will be informed only when both parties have added each other to their "Crush List".

When a user logs in, they see the people in their friends list in the order of their logging in to the site, the first person being the latest one to do so.<ref >{{cite web | title="How are the friends on my homepage ordered?" | url=http://help.orkut.com/bin/answer.py?answer=11774}}</ref> Orkut's competitors are other social networking sites including [[MySpace]] and [[Facebook]]. [[Ning]] is a more direct competitor, as they allow creation of Social Networks which are similar to Orkut's communities.

===Orkut redesign===

On August 24, 2007, Orkut announced a redesign. The new [[User interface|UI]] contains round corners and soft colors including small logotype at upper left corner. The redesign has been announced on the official Orkut [[Blog]]. By August 30, 2007, most users on Orkut could see changes on their profile pages as per the new redesign. On August 31, 2007, Orkut announced its new features including improvements to the way you view your friends, 9 rather than 8 of your friends displayed on your homepage and profile page and basic links to your friends' content right under their profile picture as you browse through their different pages. It also announced the initial related languages: Hindi, Bengali, Marathi, Tamil and Telugu. Profile editing can take place by clicking the settings button under your profile photo (or alternatively, click the blue settings link at the top of any page).

On September 4, 2007, Orkut announced another new feature. You can now see an "Updates from your friends" box on the [[homepage]], where you'll get real-time updates when your friends make changes to their profiles, photos and videos. Moreover, in case you want to keep some things on your profile private, Orkut has added an easy opt-out button on the settings page. [[Scrap]]s (popularly word for messages in orkut) was also [[HTML]]-enabled letting users now interact in a more interesting manner. On November 8, 2007, Orkut greeted its Indian users Happy Diwali in a very special way, by allowing them to change their Orkut look to a Diwali-flavored reddish theme. On April Fools' Day 2008, Orkut temporarily changed its name on its webpage to yogurt, apparently as a prank. On 2 June 2008, Orkut has launched its theming engine with a small set of default themes.<ref>[http://en.blog.orkut.com/2008/06/if-youre-in-india-and-feel-like-change.html orkut Blog: If you're in India and feel like a change of scene<!-- Bot generated title -->]</ref> along with this PHOTO tagging has also finally arrived at Orkut.

===Orkut applications===

On 16 April, 2008, Orkut began rolling out applications to everyone in India and then in phases to the rest of the world.<ref>[http://en.blog.orkut.com/2008/04/apps-are-live-in-india.html orkut Blog: Apps are live in India<!-- Bot generated title -->]</ref>

Orkut has several applications launched today,{{when}} most ones shared with [[Friendster]] made available with [[OpenSocial]].

==History of Orkut==

===Flooders and fake profiles===

As with any online social networking community, a number of fake and cloned profiles exist on Orkut.<ref>{{cite web | url=http://www.rediff.com/news/2007/feb/06orkut.htm | title=Fake Orkut profile of schoolgirl posted | date=February 6, 2007 | publisher=[[Rediff]] | accessdate=2007-07-10}}</ref> Due to the large number of users and the deactivation of the jail system, the profiles were often left unremoved or, when removed, recreated easily. These profiles are normally created to [[troll (internet)|troll]], to [[spam (electronic)|spam]], to flood or just for fun. It is not hard to find users owning more than one profile, with some stating they own hundreds.

In 2005, invisible profiles, communities and topics started to appear in Orkut. This could be achieved by using [[HTML]] escaping codes and 1x1 pixel photos to fool the engine behind the site.<ref>{{cite web | url=http://www.orkutproxytricks.com/invisible-picture-on-orkut-become-invisible/ | title=Invisible picture on orkut: become invisible | publisher=Orkut proxy and tricks | date=June 19, 2007 | accessdate=2007-07-10}}</ref> This hole was later fixed, and currently there is a lower limit on profile image dimensions.

In August 2005 a [[freeware]] program was made in [[Delphi programming language|Delphi]] called ''Floodtudo'' ("tudo" in [[portuguese language|Portuguese]] means "everything" - this was developed by a [[Brazil]]ian) specifically for flooding Orkut. It quickly spread through the users and was easily downloadable (the most common Floodtudo versions were 1.2, 1.5, 2.0 and 2.2). As this program was massively used by thousands of spammers, a big spam wave struck Orkut in September and October 2005. Another most commonly used Scrap Flooder "Carbon Copy Scraper" & "Blind Carbon Copy Scraper" (commonly called CCS & BCCS ) was javascript based (popular versions 2.4, 3.3, and 5.1), available in every famous orkut communities.The main idea behind this was only allowing the profile holders to send a same scrap to all friends at a single time, but was missued by spammers.

As the flooding of Orkut was becoming out of control, the developers implemented some features in order to stop this. These features included not allowing two or more verbatim topics or scrapbook entries to be submitted, forcing the user to wait before posting another topic or scrapbook entry, and the usage of [[captcha]]s, whenever a scrap entry is hyperlinked. They gave more rights to community moderators as well, so that users can be banned outright instead of relying on the developers to remove them.

There has recently been controversy revolving around the use of Orkut by various [[hate group]]s. Virulent racists and religious fanatics allegedly have a solid following there. Several hate communities focused on [[racism]], [[Nazism]] and [[white supremacy]] have been deleted due to guideline violation.

In 2005, various [[cases]] of [[racism]] were brought to police attention and reported on in the Brazilian [[News media|media]].<ref>[http://zonaeuropa.com/20050326_2.htm Racism in Brazilian Orkut]</ref> In 2006, a judicial measure was opened by the Brazil federal justice denouncing a 20-year-old [[student]] accused of [[racism]] against those of [[Black African]] ancestry and spreading defamatory content on Orkut.<ref>{{cite news | url=http://www.estadao.com.br/tecnologia/internet/noticias/2006/fev/01/97.htm | title=Racismo na internet chega à Justiça | date=February 1, 2006 | language=[[Portuguese language|Portuguese]] | publisher=Estadão | accessdate=2007-07-10}}</ref> Brazilian Federal Justice subpoenaed Google on March 2006 to explain the crimes that had occurred in Orkut.<ref>{{cite news | url=http://www1.folha.uol.com.br/folha/informatica/ult124u19750.shtml | title=Ministério Público pede que Google explique crimes no Orkut | date=March 10, 2006 | language=[[Portuguese language|Portuguese]] | publisher=Folha Online | accessdate=2007-07-10}}</ref>

[[Anti-religion]], anti-national, and [[anti-ethnic]] hate groups have also been spotted. Recently an Indian court has issued notices to Google on some of the groups. The [[Mumbai]] Police are seeking a ban on Orkut post objections raised by political groups. Groups denigrating various political leaders and celebrities have also emerged. Also in a reported case of 2005, racist groups have been reported. They were anti-[[Tamil people|Tamil]] groups. Recently a member of a Tamil hate group is currently being tracked down.

===State Censorship===

Orkut was very popular in [[Iran]], but the website is now [[Censorship in Iran|blocked by the government]]. According to official reports, this is due to national security issues, and [[Islam]]ic [[ethics|ethical]] issues about dating and match making. To get around this block, sites such as ''orkutproxy.com'' (now defunct) were made for Iranian users. Other websites such as [[Yahoo! Groups]] and [[Google Groups]] have communities dedicated to receiving updates on the newest location of Iran's Orkut proxy. Though it was once possible to bypass governmental blockage of Orkut, the site has closed its [[HTTPS]] pages on all anonymous proxies. Now it is almost impossible for ordinary users to visit this site inside Iran.<ref>[http://www.orkutproxytricks.com/orkutcom-users-increasing-problems-too/ Orkut and Iran]</ref>

Many other sites have been published in Iran since Orkut's blockage, using the same social-networking model - examples include MyPardis, [[Cloob.com|Cloob]] and Bahaneh.<ref>[http://lycos.com/info/orkut.html?page=2 About Orkut]</ref>

In August 2006, [[United Arab Emirates]] followed the footsteps of Iran in blocking the site. This block was subsequently removed in October 2006. On July 3, 2007, [[Gulf News]] revisited the issue, publishing complaints from members of the public against Orkut communities like "Dubai Sex", and officially bringing the complaints to the attention of the state telecom monopoly [[Etisalat]].<ref>[http://archive.gulfnews.com/articles/07/07/03/10136441.html Gulfnews: Orkut.com 'being used for immoral activities'<!-- Bot generated title -->]</ref> By July 4, 2007, Etisalat had placed a renewed ban on the site,<ref>[http://archive.gulfnews.com/articles/07/07/04/10136890.html Gulfnews: Orkut.com banned in the UAE<!-- Bot generated title -->]</ref> which remains in effect despite Google's promise to negotiate the ban with the UAE.<ref>[http://www.ameinfo.com/125653.html Orkut blocked in sex row Media and Advertising<!-- Bot generated title -->]</ref> [[Saudi Arabia]] is another country that has blocked access to Orkut, while [[Bahrain]]'s information ministry is also under pressure to follow suit.<ref>[http://www.gulf-daily-news.com/story.asp?Article=189583&Sn=bnew&IssueID=30137 Gulf Daily News<!-- Bot generated title -->]</ref>

===Privacy===

Earlier in Orkut it was possible for anybody to view anyone's pictures, videos as well as scraps, but this gave promotion to the people who started misusing the photos and videos and placed them on the internet with fake details. Many of them were vulgar, especially pictures of women. Moreover, the scraps could be read easily. Currently [[privacy]] covers such features as scraps (separate read and write access), videos, photo albums, testimonials, and applications. The following privacy levels are currently available to users: friends/friends of friends/everyone in the network. In December 2008, Orkut developers have introduced another privacy update that allow you to restrict viewing of your albums to certain number of friends, as well as selected e-mail contacts. The user can limit visibility of her/his profile to a certain region or group of regions (known as a "network"); in this case outside of these regions no user information is available.

Initially, the common opinion{{who}} was that out of the two major countries, only users in India will be interested in privacy on Orkut, while Brazil, being a very [[open society]], would not need it. In reality, the percentage of users choosing to hide their data is the same in India and Brazil. The only difference is that in the Brazilian sector of Orkut there is a community "Quer privacidade? Sai do Orkut" ("Want privacy? Get out of orkut") against other people's privacy.

In order to stop flooding and other hacking attempts, all Orkut [[URL]]s are now highly [[encrypted]], and very difficult to crack. Also, each URL has a "#" in it, so as to stop external [[JavaScript]]s.

==Security and safety==

In December 2007, hundreds of thousands of users accounts were affected, using another [[cross-site scripting|XSS]] vulnerability and a worm. A user's account was affected when the user simply read a particular scrap containing an embed which caused the user to automatically become a part of a community on the site, without approval. The affected user's account was then used to send this scrap to everyone present in the user's friend list thereby creating a sort of a huge wave.

===MW.Orc worm===

On June 19, 2006 FaceTime Security Labs' security researchers Christopher Boyd and Wayne Porter discovered a worm, dubbed MW.Orc.<ref name="mworc">{{cite web | url=http://blog.spywareguide.com/2006/06/datatheft_worm_targets_googles_1.html | title=Data-Theft Worm Targets Google's Orkut | date=June 16, 2006 | publisher=SpywareGuide | accessdate=2007-07-10}}</ref> The worm steals users' banking details, usernames and passwords by propagating through Orkut. The attack was triggered as users launched an executable file disguised as a [[JPEG]] file. The initial executable file that causes the infection installs two additional files on the user's computer. These files then e-mail banking details and passwords to the worm's anonymous creator when infected users click on the "My Computer" icon.

The infection spreads automatically by posting a [[Uniform Resource Locator|URL]] in another user's Orkut Scrapbook, a guestbook where visitors can leave comments visible on the user's page. This link lures visitors with a message in Portuguese, falsely claiming to offer additional photos. The message text that carries an infection link can vary from case to case. In addition to stealing personal information, the malware can also enable a remote user to control the PC and make it part of a [[botnet]], a network of infected PCs. The botnet in this case uses an infected PC's [[Bandwidth (computing)|bandwidth]] to distribute large, pirated movie files, potentially slowing down an end-user's connection speed.

The initial executable file (Minhasfotos.exe) creates two additional files when activated, winlogon_.jpg and wzip32.exe (located in the [[System32]] Folder). When the user clicks the "My Computer" icon, a mail is sent containing their personal data. In addition, they may be added to an XDCC Botnet (used for file sharing), and the infection link may be sent to other users that they know in the Orkut network. The infection can be spread manually, but also has the ability to send "back dated" infection links to people in the "[[friend]]s [[list]]" of the infected user. According to statements made by Google, as noted in Facetime's Greynets Blog, the company had implemented a temporary fix for the dangerous worm.<ref name="mworc"/>

====HTTPS Not Obvious====

In and around April 17, 2007 users began reporting that secure ([[https]]) access to the Orkut login server was no longer available. In fact, Google had changed the main login page to http delivery to improve efficiency, but the actual login remained secure using [[https]] in an [[iframe]].<ref>http://groups.google.com/group/orkut-help-profiles/browse_frm/thread/8fd95fe3aae5b839/204595c9069fb9d9?lnk=gst&q=https+login&rnum=1#204595c9069fb9d9</ref> This information had not been well-published by Google, and did not give the users the reassurance of seeing the "secure connection" padlock in the browser. On July 17, 2007, a revised login page, which is delivered via https, addressed these issues.

====Session Management and Authentication Issues====

On June 22, 2007 Susam Pal and Vipul Agarwal published a security advisory on Orkut vulnerabilities related to [[authentication]] issues.<ref name="orkut-authentication-bug-fd">{{cite web | url=http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/064143.html | title=Orkut Authentication Issues - Full Disclosure}}</ref> The vulnerabilities are considered very dangerous in cybercafes, or in the case of [[man-in-the-middle attack]] as they can lead to session hijacking and misuse of legitimate accounts.<ref name="orkut-authentication-bug-news">{{cite web | url=http://xssed.com/news/32/Orkut_vulnerable_to_2_user_authentication_issues/ | title=XSSED News Report on Authentication Issues}}</ref> The vulnerabilities are not known to be fixed yet and therefore pose threat to the Orkut users.

A week later, on June 29, 2007 Susam Pal published another security advisory which described how the Orkut authentication issue can be exploited to hijack Google and Gmail sessions and misuse the compromised account of a legitimate user under certain conditions.

Joseph Hick performed an experiment on the basis of the advisories published by Susam Pal, to find out how long a session remains alive even after a user logs out.<ref name="orkut-authentication-issue-poc">{{cite web | url=http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/064341.html | title=Google/Orkut Authentication Issue PoC }}</ref> His experiment confirmed that the sessions remain alive for 14 days after the user has logged out. It implies that a hijacked session can be used for 14 days by the hijacker because logging out does not kill the session.<ref name="orkut-session-results">{{cite web | url=http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064649.html | title=Google/Orkut Session Expiry PoC - Results }}</ref>

====W32/KutWormer====

On December 19, 2007, a worm written in Javascript started to cause havoc. Created by a Brazilian user called "Rodrigo Lacerda", it automatically made the user join the virus related community and infect all friends' scrapbooks with copies of itself, the worm infected over 700,000 orkut [[user]]s, it was a huge wave of [[infection]]. The worm is spreading through Orkut’s recently introduced tool that allows users to write messages that contain HTML code. The ability to add Flash/Javascript content to Orkut scraps was only recently introduced.<ref>[http://www.washingtonpost.com/wp-dyn/content/article/2007/12/19/AR2007121900781.html Worm Hits Google's Orkut - washingtonpost.com<!-- Bot generated title -->]</ref><ref>[http://www.eweek.com/article2/0,1895,2237733,00.asp Worm Squirms Through Google`s Orkut<!-- Bot generated title -->]</ref>

On March 3, 2008 W32/Scrapkut.worm was found. The worm attempts to spread itself by sending orkut users scraps that contains the link to the worm itself. Aliases

Downloader.Banload.ONK (GRISoft) TR/Dldr.Orkut.A (Avira) Trojan-Downloader.Win32.Banload.auf (IKARUS) Trojan.DL.Win32.Banload.dzm (Rising) W32.Scrapkut (Symantec).

====Other Attacks====

====Private Album Crack====

In December 2007, a [[Brazil]]ian [[cracker]] named "Rodrigo Lacerda" published a [[Scripting language|script]] that allowed users to scrape other people's private photos. The exploit consisted of generating album photo urls, due to their simple structure. The main idea behind this was by "Master Shekhar" an Indian Cracker. This crack made Orkut team implement new secure album/photos implementation.

====Social Engineering====

[[Attack]]s on orkut using [[social]] [[engineering]] never stop. Among these the easiest kind is to offer a user to enter a script into the browser's address area, to "improve performance".

==Legal Issues==

===Brazil===

On August 22, 2006, Brazilian Federal Judge José Marcos Lunardelli ordered Google to release Orkut user’s information of a list of about two dozen Brazilian nationals, believed to be using Orkut to sell drugs and involved in child pornography by September 28. The judge ordered Google to pay $23,000 per day in fines until the information is turned over to the Brazilian government. The information the government is requesting would also be used to identify individuals that are spreading [[child pornography]]<ref>{{cite news | url=http://www.orkut.etc.br/portal/criancas-no-orkut | title=Meninas a um clique do abuso sexual com fotos sensuais em blogs e no orkut

| date=May 10, 2006 | publisher=[[Revista Orkut.etc.br]] | accessdate=2007-07-10}}</ref> and [[hate speech]], according to the Brazilian government. As of September 27, 2006 Google has stated that it will not release the information, on the grounds that the requested information is on Google servers in the U.S. and not Google servers in Brazil, and is therefore not subject to [[Law of Brazil|Brazilian laws]].<ref>[http://www.boingboing.net/2007/03/13/more-on-orkut-and-la.html Orkut and Brazilian Laws]</ref>

===India===

Of late, the number of Indians on Orkut has been increasing rapidly. On October 10, 2006, the [[Bombay]] High Court's [[Aurangabad, Maharashtra|Aurangabad]] bench served a notice on Google for allowing a hate campaign against India.<ref>{{cite news | url=http://timesofindia.indiatimes.com/articleshow/2136970.cms | title=Google's social networking site in trouble

| date=October 10, 2006 | publisher=[[The Times of India]] | accessdate=2007-07-10}}</ref> This referred to a community on Orkut called 'We Hate India', which initially carried a picture of an Indian flag being burned and some [[Indophobia|anti-India]] content.<ref>{{cite web | url=http://harshad.wordpress.com/2007/02/22/police-planning-to-ban-orkut-in-india/ | title=Police planning to ban Orkut in India | date=February 22, 2007 | accessdate=2007-07-10}}</ref> The High Court order was issued in response to a public-interest petition filed by an Aurangabad advocate. Google had six weeks to respond. Even before the petition was filed, many Orkut users had noticed this community and were mailing or otherwise messaging their contacts on Orkut to report the community as bogus to Google, which could result in its removal. The community has now been deleted but has spawned several 'We hate those who hate India' communities. Prior to the 60th Independence Day of India, orkut's main page was revamped. The section which usually displayed a collage of photos of various people, showed a stylized orkut logo. The word ''orkut'' was written in the [[Devanagiri]] script and was colored in the [[Flag of India|Indian national colours]]. Clicking on the logo redirects to a post by the orkut India Product Manager, Manu Rekhi,<ref>[http://en.blog.orkut.com/2007/08/60-years-of-independence-tell-us-what.html orkut blog: Post to commemorate 60 years of Indian Independence]</ref> on the orkut internal blog. There has also been some media outcry against Orkut after a couple of youngsters were apparently lured by fake profiles on the site and later murdered.<ref>[http://www.indiaprwire.com/businessnews/20070821/23999.htm Friends of slain teen arrested, Orkut angle being probed - India PRwire<!-- Bot generated title -->]</ref>

On November 23, Bombay High Court asked the state government to file its reply in connection with a petition demanding a ban on social networking site, Orkut, for hosting an anti-[[Shivaji]] Web community.<ref>{{cite news | url=http://in.rediff.com/news/2006/nov/23orkut.htm | title=File reply on plea for ban on Orkut: HC | date=November 23, 2006 | publisher=[[Rediff]] | accessdate=2007-07-10}}</ref> Recently, the Pune rural police cracked a [[rave party]] filled with [[narcotics]].<ref>{{cite web | url=http://harshad.wordpress.com/2007/03/05/pune-rural-police-crack-a-[[rave-party]]/ | title=Pune rural police crack a rave party | date=March 5, 2007 | accessdate=2007-07-10}}</ref> The accused have been charged under anti-narcotic laws, the (Indian) Narcotic Drugs and Psychotropics Substances Act, 1985 (NDPS). Besides the NDPS, according to some media reports, the police were deliberating on the issue of charging the accused under the (Indian) Information Technology Act, 2000 perhaps because Orkut was believed to be one of the mode of communication for these kind of drug abuses.<ref>{{cite web | url=http://www.ciol.com/content/news/2007/107030610.asp | title=Pune rave party breached IT Act? | date=March 6, 2007 | publisher=Ciol | accessdate=2007-07-10}}</ref> The Cyber police in India have entered into an agreement with Orkut to have a facility to catch and prosecute those misusing Orkut since the complaints is in a rising stage.<ref>{{cite web | url=http://www.hindu.com/2007/11/29/stories/2007112960280300.htm | title=Police tie up with Orkut | date=November 20, 2007 | publisher=The Hindu| accessdate=2007-11-29}}</ref>

==See also==

* [[List of social networking websites]]

* [[List of Google products]]

* [[Social Network Service|Social network]]

* [[Business network]]

* [[Social software]]

==References==

{{reflist|2}}

<!-- if these are used as references, they ought to be worked into the article as inline citations -->

* Butalia, S. (2004). [http://www.foolonahill.com/mbasns.html ‘The potential for marketers to exploit the emerging trend of online social networking groups’]

* Dwoskin, E. (2006). [http://www.businessweek.com/ap/financialnews/D8KDFT1G0.htm Google won't hand data to Brazil judge]

* Hempell, A. (2004). [http://www.anthonyhempell.com/papers/orkut/ Orkut at eleven weeks: An exploration of a new online social network community]

* Hunt, Kasie, "Osama Bin Laden Fan Clubs Build Online Communities", [http://www.usatoday.com/tech/news/2006-03-08-orkut-al-qaeda_x.htm], March 8, 2006.

==External links==

{{sisterlinks|orkut}}

* [http://www.orkut.com Official Site]

* [http://en.blog.orkut.com/ Official Blog (in English)]

* [http://blog.orkut.com/ Official Blog (in Portuguese)]

* [http://www.orkut.co.in/Main#Profile.aspx?uid=325082930226142255/ Orkut's ORKUT profile]

{{Google Inc.}}

[[Category:Internet properties established in 2004]]

[[Category:E-mail websites]]

[[Category:Google services]]

[[Category:Web 2.0]]

[[Category:Online social networking]]

[[ca:Orkut]]

[[cs:Orkut]]

[[de:Orkut]]

[[et:Orkut]]

[[es:Orkut]]

[[eo:Orkut]]

[[fa:اورکات]]

[[fr:Orkut]]

[[gl:Orkut]]

[[hi:ऑरकुट]]

[[it:Orkut]]

[[lt:Orkut]]

[[hu:Orkut]]

[[ml:ഓര്‍ക്കട്ട്]]

[[mr:ऑर्कुट]]

[[nl:Orkut]]

[[ja:Orkut]]

[[pl:Orkut]]

[[pt:Orkut]]

[[ru:Orkut]]

[[fi:Orkut]]

[[sv:Orkut]]

[[ta:ஆர்க்குட்]]

[[th:ออร์กัต]]

[[vi:Orkut]]

[[tr:Orkut]]

[[uk:Orkut]]

[[zh:Orkut]]