Paul Stamatiou

25 year old developer and startup guy living in SF

Appsumo contest Entrepreneur's Book collection
Checkout AppSumo's contest for the Entrepreneur's Book Collection!
Picplum Banner

Twitter Vulnerability Surfaces

14 Jan 2007

Twitter, everyone's favorite useless yet addictive global away message service thing, seems to have been exploited by a user. Whenever someone visits twitter.com/x and is currently logged into their Twitter account, their Twitter message will say something along the lines of "Looking at Bon's Twitter page". I fell victim to this earlier today after I saw a friend's Twitter say that.

Twitter exploit

I looked around the page source and other included files with FireBug but I didn't see anything resembling a possible XSS exploit. As of this writing, it seems like the page no longer changes your message. This whole thing made me realize how powerful the exploit or whatever you want to call it could have been, considering many people have their Twitter status embedded on their website.

This is similar to how many people have MyBlogLog badges on their site and the recent exploit for free advertising.

Come back soon!

Subscribe via RSS or email.

AppSumo. Deals on tools for startups. Check em out.