Skip to main content

Twitter: Serious Flaw

Twitter, the popular short message service has a serious flaw that can impact your feeds and timelines. If you tweet accept @k_avinash, you will automatically be added to that persons follow list.
What exactly does this mean?  It means that anyone can force themselves into your “follow” list without your approval.  No longer do you have control over whom you will follow or who is posting information to your feeds. This works with both native and third party clients.
If a spammer were to exploit this flaw, the results could be devastating to the Twitter service.  A simple script could easily force a spammer's message into thousands of feeds.  A tactic such as this could render the service useless if it becomes overwhelmed with spam. Malicious users could also use it to DM spam users with links and tweets.
Twitter has confirmed they are working on a fix for the issue. All users are currently displaying "0 followers" at present.

image
Post adapted from Neowin. Image credit goes to @k_avinash
Direct update from Twitter:
Follow bug discovered, remedied. We identified and resolved a bug that permitted a user to “force” other users to follow them. We’re now working to rollback all abuse of the bug that took place. Follower/following numbers are currently at 0; we’re aware and this too should shortly be resolved.
Labels:

Comments

  1. AnonymousMay 10, 2010 at 11:38 PM

    Twitpocalypse!

    ReplyDelete
  2. AnonymousMay 10, 2010 at 11:38 PM

    twitter isn't the end of the world. go enjoy the outdoors & stop bitching about your followers =)

    ReplyDelete
  3. mashableMay 10, 2010 at 11:40 PM

    I have no followers...It's the end of the world! I'm alone and miserable again. HELLO...hello...hello (echoes through the empty void)

    ReplyDelete
  4. mashableJanuary 20, 2011 at 1:01 PM

    I have no followers...It's the end of the world! I'm alone and miserable again. HELLO...hello...hello (echoes through the empty void)

    ReplyDelete
  5. AnonymousJanuary 20, 2011 at 1:01 PM

    twitter isn't the end of the world. go enjoy the outdoors & stop bitching about your followers =)

    ReplyDelete

Post a Comment

Popular posts from this blog

Microsoft Officially Confirmed New Windows Logo

Microsoft changed its Windows Logo, an inspired design from its new Metro interface. A day after Apple unveiled its next operating system Mountain Lion, Microsoft announced in an official blog confirmation that it has redesigned the Windows Logo. This new logo is truly inspired from its well known mobile operating system Windows Phone.         The new design is the biggest change from its classic 90s logo. In an official post , Microsoft’s Principal Director of User Experience for Windows confirmed that the new logo carries Metro principle of being ‘Authentically Digital’. “ It’s a window… not a flag …., “your name is Windows. Why are you a flag?” In some ways you can trace the evolution of the Windows logo in parallel with the advancements of the technology used to create logos. From the simple two color version in Windows 1.0 to the intricate and detailed renderings in Windows Vista and Windows 7, each change makes sense in the context i...
Post a Comment
Read more

Breaking: Microsoft India Store Has Been Hacked. Passwords In Plain Text Format Exposed [Update]

Well, this is huge! Microsoft’s India online store website has been hacked and all user information which was stored in plain text format without any encryption has also been exposed. It looks like the hacker team got remote access to the whole web server. The main reasons behind this hack are still unknown but from the homepage replaced information, its been predicted that a non well known hacker organization EvilShadow is behind all this invasion.     Microsoft pulled out the store page right now and might be working on this to get back the site. The unacceptable thing in all this story is that the software giant stored all the user information including passwords in the database in plain text without any encryption for such online shopping site. Update (as of 11:45 PM Central Time, 2/12/12) – The Microsoft Store India is still currently unavailable to users. To patch up things, Microsoft is asking customers to change their passwords immediately. Full email me...
7 comments
Read more

Windows Phone 7.5 Tango Officially Renamed As ‘Refresh’

The next version of Microsoft’s Windows Phone operating system after Mango 7.1 is officially renamed as ‘Windows Phone 7.5 Refresh’ – according to the head of Windows Phone division for Microsoft Italy.     According to Italian version of the post , 7.5 Refresh update will mostly be an update to the minimum specs of the devices it’ll be able to run (minimum RAM requirements is dropped from 512 MB to 256 MB). Other updates which may include in this release are better media messaging, location awareness icon, export and manage contacts to SIM card. The next major update after ‘Refresh’ is called Windows Phone Apollo (probably Windows Phone 8) could certainly be an exciting release from Microsoft. This Apollo update may have BitLocker kind of support on mobile devices, multi-core support. [ via ] [ Image ]
Post a Comment
Read more