Twitter virus: cross site scripting security issue

By    John Garner on  Sunday, April 12, 2009
Summary: Quick note to say that there seems to be a twitter security issue based upon cross site scripting. Initially it was thought to be a virus but this post on NetworkWorld seems to indicate that it is in effect a cross site scripting hack . This basically means that should it be an XSS hack, […]

Quick note to say that there seems to be a twitter security issue based upon cross site scripting. Initially it was thought to be a virus but this post on NetworkWorld seems to indicate that it is in effect a cross site scripting hack . This basically means that should it be an XSS hack, Twitter are not high up there with their security standards. It won't look good if what seems to be a phishing hack is possible on their site!

Update: the script used to infect all the Twitter users was crafted by a 17 year old from Brooklyn who claims to have been bored and was highlighting the vulnerability while promoting his own site! Twitter have "closed the hole" as per Geoff's comment below.

Article written by  John Garner

Leave a Reply

Your email address will not be published. Required fields are marked *

One comment on “Twitter virus: cross site scripting security issue”

Recent Posts

Check out the most recent posts from the blog: 
Sunday, September 24, 2023
The reliability & accuracy of GenAI

I question the reliability and accuracy of Generative AI (GenAI) in enterprise scenarios, particularly when faced with adversarial questions, highlighting that current Large Language Models (LLMs) may be data-rich but lack in reasoning and causality. I would call for a more balanced approach to AI adoption in cases of assisting users, requiring supervision, and the need for better LLM models that can be trusted, learn, and reason.

Read More
Saturday, September 23, 2023
From Chatbots to Reducing Society's Technical Debt

I discuss my experience with chatbots, contrasting older rules-based systems with newer GenAI (General Artificial Intelligence) chatbots. We cannot dismiss the creative capabilities of GenAI-based chatbots, but these systems lack reliability, especially in customer-facing applications, and improvements in the way AI is structured could lead to a "software renaissance," potentially reducing society's technical debt.

Read More
Friday, June 16, 2023
The imbalance of power in the AI game: in search of the common good

The article discusses the contrasting debate on how AI safety is and should be managed, its impact on technical debt, and its societal implications.
It notes the Center for AI Safety's call for a worldwide focus on the risks of AI, and Meredith Whittaker's criticism that such warnings preserve the status quo, strengthening tech giants' dominance. The piece also highlights AI's potential to decrease societal and technical debt by making software production cheaper, simpler, and resulting in far more innovation. It provides examples of cost-effective open-source models that perform well and emphasizes the rapid pace of AI innovation. Last, the article emphasises the need for adaptive legislation to match the pace of AI innovation, empowering suitable government entities for oversight, defining appropriate scopes for legislation and regulation, addressing ethical issues and biases in AI, and promoting public engagement in AI regulatory decisions.

Read More
Thursday, June 1, 2023
Japan revises copyright laws for AI

Japan has made its ruling on the situation between Content creators and Businesses. Japanese companies that use AI have the freedom to use content for training purposes without the burden of copyright laws. This news about the copyright laws in Japan reported over at Technomancers is seen as Businesses: 1 / Content Creators: 0 The […]

Read More
crossmenuarrow-down