TweetDeck Vulnerability Opens User Accounts To Hackers

Hackers have exploited a vulnerability in TweetDeck, a popular interface for the social media service, taking control of users' accounts to send gibberish and display odd dialogue boxes, such as:

Twitter responded:

... and then a few minutes later:

The Guardian says the problem is a "cross-site scripting" (XSS) vulnerability, saying: "Most attacks using the vulnerability are no more than irritations, opening warning dialogues on users' computers — though one version created a retweet of itself, and spread 38,000 times in two minutes, and another changed the font on TweetDeck itself to Comic Sans."

Comments

 

Please keep your community civil. All comments must follow the NPR.org Community rules and terms of use, and will be moderated prior to posting. NPR reserves the right to use the comments we receive, in whole or in part, and to use the commenter's name and location, in any medium. See also the Terms of Use, Privacy Policy and Community FAQ.