DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Author Topic: Avoid Twitter Until Further Notice:  (Read 4,477 times)

KynloStephen66515

  • Animated Giffer in Chief
  • Honorary Member
  • Joined in 2010
  • **
  • Posts: 3,772
    • Participated in NANY Challenge Three Times
    • Cody Award
    • Coding Snacks
    • Official Forum Clown
    • Volunteers/Staff
    • Writer
    • Hardware Hacker
    • DJ Badge - DJ
    • Linux User
Avoid Twitter Until Further Notice:
« on: September 21, 2010, 01:57 PM »
Quote
A flaw in the website of micro-blogging service Twitter is being used to pump out pop-up messages and links to porn sites.

Initially, users only had to move their mouse over the link - not click it - to open it in the browser.

Thousands of Twitter accounts have so far posted messages exploiting the flaw including Sarah Brown, the wife of former Prime Minister Gordon Brown.

Twitter said it was aware of the problem and would issue a patch soon.

The flaw which caused pages to open automatically appears to have been fixed.

This command - written in a programming language called Javascript - automatically directed users to another website, some of which contain pornography. Whilst the links are still there, users must now actively click on them.
Continue reading the main story
Related stories
Twitter unveils major redesign
Twitter hit by security breaches

The malicious links look like a random URL and contain the code "onmouseover".

"There is no legitimate reason to tweet Javascript," Graham Cluley, a researcher at security firm Sophos, told BBC News.

The code is being spread by worms, self-replicating and malicious piece of code.

Read More:

http://www.bbc.co.uk/news/technology-11382469

Stoic Joker

  • Honorary Member
  • Joined in 2008
  • **
  • Posts: 6,652
    • Cody Award
    • Participated in NANY Challenge Five Times
Re: Avoid Twitter Until Further Notice:
« Reply #1 on: September 21, 2010, 04:46 PM »
One man's exploit is another man's Ad campaign - Somebody in a corporate boardroom somewhere had to go Hot-Damn skippy that's a great idea, and sign-off on it before it "hit" the web.

It's the marketing people that are screwing up the web, it always has been. The only lesson that can be learned from Donald Trumps show the Apprentice (where they sell inedible cupcakes for $20,000 a piece) is AnyThing for a buck.

daddydave

  • test
  • Supporting Member
  • Joined in 2008
  • **
  • Posts: 867
    • Participated in NANY Challenge Once
Re: Avoid Twitter Until Further Notice:
« Reply #2 on: September 21, 2010, 07:54 PM »
That seems very odd to me..bits of end user javascript have been allowed to pass through twitter unaltered all this time?

f0dder

  • [Well, THAT escalated quickly!]
  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 9,153
    • Participated in NANY Challenge Once
Re: Avoid Twitter Until Further Notice:
« Reply #3 on: September 21, 2010, 08:49 PM »
That seems very odd to me..bits of end user javascript have been allowed to pass through twitter unaltered all this time?
They did it for teh lulz!
- carpe noctem

Original address: https://www.donationcoder.com/forum/index.php?topic=24059.0