IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [twitter]

Real-time information network that connects you to the latest stories, ideas, opinions and news about what you find interesting.

33 questions
45
votes
2 answers

Does this mean Target's twitter was successfully attacked?

I was just surprised to see this suspicious promoted tweet, asking me to send Bitcoins I added the hand-drawn red lines so I am not responsible for propagating the apparent scam. Clicking on the user name seems to take me to the genuine Target…
Oddthinking
  • 1,767
  • 3
  • 15
  • 17
12
votes
2 answers

Preventing Voter Fraud on a Social Media Contest

I'm creating a contest that will allow users to login using their Facebook & Twitter accounts and submit votes on videos. My clients concern is that users will game the system by logging into different Facebook & Twitter accounts to keep spamming…
user2241961
  • 123
  • 4
10
votes
1 answer

Why don't Twitter and Facebook enforce password complexity during sign up?

If you try creating an account using your smartphone, these platforms don't seem to have strong password requirements. They both enforce a minimum 6 character limit and nothing else (I did however notice Twitter seems to filter out certain passwords…
user246392
  • 251
  • 2
  • 6
9
votes
5 answers

Can you still be tracked when using a VPN?

If I am using a VPN to connect to Twitter, can an organisation like Anonymous or Lulzec track me and find out my identity?
qwerty
  • 109
  • 1
  • 1
  • 2
6
votes
2 answers

How is HTTPS Everywhere leaking my Twitter session from an incognito window?

I manage a couple of twitter accounts for businesses/websites that are separate from my personal account. For simplicity, I prefer to log in from an incognito window so that I don't need to log out of my primary (personal) twitter account. I was…
nhinkle
  • 203
  • 1
  • 9
6
votes
1 answer

Oauth Consumer Secret?

Using OAuth you have a consumer key and consumer secret to identify your application and the user provides an OAuth access token and secret to authenticate your application access to their account, say Twitter. Lets says you are developing a desktop…
iiSeymour
  • 160
  • 6
5
votes
1 answer

SSL certificate issued in my company's name instead of twitter.com

When I open twitter.com in my browser, I can see the SSL certificate is issued in the name of my company instead of twitter.com. What is this actually?
user1808556
  • 124
  • 5
3
votes
3 answers

What makes twitter different than other sites regarding users anonymity

Why do we hear everyday about people getting prosecuted because of comments they made on twitter but not on Facebook or reddit? I know very little about social media but it's not that difficult to hide your identity online unless NSA is after you…
Ulkoma
  • 8,793
  • 16
  • 65
  • 95
3
votes
1 answer

How did the Tweetdeck XSS vulnerability work?

How exactly did the recent TweetDeck vulnerability work? It says here that it had something to do with the HTML heart character but I don't fully understand what the explanation means. From the link: " I was tweeting about the HTML-heart-symbol…
Eels
  • 213
  • 2
  • 7
3
votes
2 answers

Is it secure: unsecured Wi-Fi + social network authentication to access the web?

Recently I visited my dental office and noticed a Wi-Fi configuration I haven't seen before. First, there is unsecured (no password) Wi-Fi, but I cannot surf the web yet. I am redirected to a webpage where I see 2 buttons (Facebook and Twitter) to…
ZygD
  • 247
  • 1
  • 2
  • 10
2
votes
1 answer

Twitter.com in private browsing leaks data to normal browser. Other sites as well? Bug or feature?

This is the first time I encountered similar thing. When I log into the Twitter web site in Chrome (namely, the Iron version which is said to be security enhanced, but that does not matter here) in private browsing mode it automatically logs me into…
superuser
  • 1,141
  • 5
  • 11
  • 16
1
vote
0 answers

Why doesn't the most powerful/powerful sites on the internet use Extended Validation SSL certificates?

Why does some of the biggest internet companies not use an Extended Validated certificate which makes the address bar would be green and more secure? I have noticed that Facebook, Google, Amazon the biggest companies I could think of that holds alot…
The Artist
  • 277
  • 1
  • 2
  • 6
1
vote
1 answer

Someone updated my friend's twitter profile after an internet forum abuse

I'm doing a security investigation for a friend of mine, working a bit of a Sherlock Holmes here... Trying to figure out a possible hack scenario for the following: My friend receives a "screw you and your Twitter profile" message on a…
Serge Shultz
  • 111
  • 4
1
vote
4 answers

External JS Security

I've worked mostly with backend processing stuff. I've been assigned to figure out how to secure external Javascript that we import from sources like Facebook, Twitter and Google. One option is locally hosting them, which may not be possible due to…
rookiedev0706
  • 11
  • 2
1
vote
2 answers

Is it normal if user gets logged in Facebook or Twitter after they use Like or Tweet button?

Personally I don't use social networks, so I'm not sure about their behaviour. Currently I must code website which heavily depends on "Likes" and "Tweets" about articles. Each article has Like and Tweet buttons. We expect that an average user will…
user3702861
  • 419
  • 1
  • 4
  • 8
1
2 3