Was this glitch that hard to fix? Apparently not. Barely 24 hours after my story hit the front door of Wired.com, MySpace has, without comment, closed the backdoor, and the websites that were exploiting it are no longer delivering private photos.
The bug was so well known prior to the public unmasking by Wired that two websites in particular (Can't Hide and MySpacePrivateProfile.com) made a fair chunk of change with an ad-supported form post exploiting the bug, at the rate of 3,000 uniques a day. Clearly, MySpace had to be aware of the problem, and unless the bug was so massive, it has taken six months to patch, it looks suspiciously like they didn't work to fix the bug until it made front page here at Mashable and Wired.
Not to beat a dead horse, but it certainly supports the theory that they aren't paying as much attention to the security of the younger users of MySpace as they would have us believe.