Questions tagged [twitter]
Real-time information network that connects you to the latest stories, ideas, opinions and news about what you find interesting.
0
votes
0answers
32 views
Does an OAuth1.0a HTTP GET endpoint in my API present a security vulnerability?
I'm building a hobby application, and I'd prefer it not end up on a cyber-security expert's list of insecure sites.
My application can post to Twitter on behalf of a user. This required implementing ...
0
votes
1answer
197 views
How does Google Authenticator interact with apps on an iPhone?
I am clear on how Google Authenticator works when logging on to a website and I am clear on that.
However, these days everyone is using apps for everything. The Twitter app, the Facebook app, the ...
44
votes
2answers
13k views
Does this mean Target's twitter was successfully attacked?
I was just surprised to see this suspicious promoted tweet, asking me to send Bitcoins
I added the hand-drawn red lines so I am not responsible for propagating the apparent scam.
Clicking on the ...
10
votes
1answer
1k views
Why don't Twitter and Facebook enforce password complexity during sign up? [closed]
If you try creating an account using your smartphone, these platforms don't seem to have strong password requirements. They both enforce a minimum 6 character limit and nothing else (I did however ...
0
votes
0answers
275 views
How to mask attack a sha256 hash with following information using hashcat?
I am hashcat newbie and I want to crack a hash :)
The answer is 1-15 (unknown) characters and it may contain 'a-z' 'A-Z' '0-9' and '_' . (A Twitter username)
How may I mask attack a hash with above ...
0
votes
2answers
518 views
Twitter allows the password to be resolved from a stolen cookie. Is that a problem? [closed]
I recently discovered and reported a security vulnerability to Twitter:
Despite my belief that the report it indeed valid, they replied to me with the following response:
As far as I can tell, this ...
0
votes
2answers
461 views
How to store user credentials in a web application? [closed]
I use the Twitter API in my app. I used to store the OAuth 2 tokens of the associated Twitter account within an application config.
But now the application's users have to be able, using the web ...
-1
votes
1answer
2k views
How can someone hack Twitter accounts so fast? [closed]
You may have heard the news about ISIS twitter accounts hacked in light of the Orlando shootings. I am wondering how can it happen so fast (just 2 days after the incident) and what kind of technique ...
3
votes
2answers
765 views
Is it secure: unsecured Wi-Fi + social network authentication to access the web?
Recently I visited my dental office and noticed a Wi-Fi configuration I haven't seen before. First, there is unsecured (no password) Wi-Fi, but I cannot surf the web yet. I am redirected to a webpage ...
5
votes
1answer
313 views
SSL certificate issued in my company's name instead of twitter.com
When I open twitter.com in my browser, I can see the SSL certificate is issued in the name of my company instead of twitter.com. What is this actually?
0
votes
3answers
613 views
Does allowing Facebook cookies over TOR threaten my anonymity?
I was using Facebook on TOR without problem - I made no modifications to TOR, I just installed it and used it (except I had to do verification of identifying friends on login).
I just switched to ...
1
vote
1answer
70 views
Are social media websites a security risk? If yes, how do we go about making them safer for users?
Generally speaking, I'm looking at a business environment. I know that Facebook Ads are not vetted and can contain malware, also users can share files on some social media sites. But what else is ...
-1
votes
1answer
779 views
Twitter phone verification while on Tor [closed]
Twitter locked me out of my account. I can log in but I can't do anything with it until I give them a phone number.
I've had the account for years but they've decided now there's "suspicious ...
1
vote
0answers
58 views
Why doesn't the most powerful/powerful sites on the internet use Extended Validation SSL certificates? [duplicate]
Why does some of the biggest internet companies not use an Extended Validated certificate which makes the address bar would be green and more secure?
I have noticed that Facebook, Google, Amazon the ...
1
vote
1answer
114 views
Someone updated my friend's twitter profile after an internet forum abuse [closed]
I'm doing a security investigation for a friend of mine, working a bit of a Sherlock Holmes here... Trying to figure out a possible hack scenario for the following:
My friend receives a "screw you ...
1
vote
3answers
600 views
External JS Security
I'm kinda new to security development. I've work mostly with backend processing stuff.
I've been assign on how to secure external javascript that we import from facebook, twitter and google.
One ...
-1
votes
2answers
175 views
How can I tell if a website is sharing what videos I'm watching without my consent?
It seems that publishers are getting sued or threatened for possibly sharing video watching information - information that an individual has watched a video, before this individual has explicitly ...
3
votes
3answers
887 views
What makes twitter different than other sites regarding users anonymity [closed]
Why do we hear everyday about people getting prosecuted because of comments they made on twitter but not on Facebook or reddit?
I know very little about social media but it's not that difficult to ...
1
vote
2answers
97 views
Is it normal if user gets logged in Facebook or Twitter after they use Like or Tweet button? [closed]
Personally I don't use social networks, so I'm not sure about their behaviour. Currently I must code website which heavily depends on "Likes" and "Tweets" about articles. Each article has Like and ...
6
votes
5answers
201k views
Can you still be tracked when using a VPN?
If I am using a VPN on twitter, can an organisation like Anonymous or Lulzec track me and find out my identity?
-5
votes
3answers
3k views
Tracking Twitter users [closed]
Is it possible to get the IP address of the person who posted a comment on my Twitter profile?
3
votes
1answer
699 views
How did the Tweetdeck XSS vulnerability work?
How exactly did the recent TweetDeck vulnerability work? It says here that it had something to do with the HTML heart character but I don't fully understand what the explanation means. From the link:
...
1
vote
0answers
301 views
How do I get the Access-Token and Access-Token-Secret?
Can anyone explain me these terms with respect to OAuth ?
Consumer Key
Consumer Secret
Access Token
Access Token Secret
Also, when I registered my application with twitter I got the consumer key ...
1
vote
2answers
459 views
Is Tweetdeck authentication really safe?
I have recently installed Tweetdeck, because my previous client stopped working.
In my custom client, and in the third party client I have used previously I had to setup authorize the application in ...
6
votes
2answers
1k views
How is HTTPS Everywhere leaking my Twitter session from an incognito window?
I manage a couple of twitter accounts for businesses/websites that are separate from my personal account. For simplicity, I prefer to log in from an incognito window so that I don't need to log out of ...
5
votes
1answer
2k views
Oauth Consumer Secret?
Using OAuth you have a consumer key and consumer secret to identify your application and the user provides an OAuth access token and secret to authenticate your application access to their account, ...
2
votes
1answer
462 views
Twitter.com in private browsing leaks data to normal browser. Other sites as well? Bug or feature?
This is the first time I encountered similar thing. When I log into the Twitter web site in Chrome (namely, the Iron version which is said to be security enhanced, but that does not matter here) in ...
12
votes
2answers
392 views
Preventing Voter Fraud on a Social Media Contest
I'm creating a contest that will allow users to login using their Facebook & Twitter accounts and submit votes on videos. My clients concern is that users will game the system by logging into ...
0
votes
2answers
164 views
Why do services like Twitter have tokens and secrets for 3rd party apps?
I noticed that if you have a 3rd-party Twitter app, you get an access token, and an access token secret, to communicate with Twitter.
Why are there two codes? Shouldn't one be enough?
Does this mean ...
