Questions tagged [twitter]

Real-time information network that connects you to the latest stories, ideas, opinions and news about what you find interesting.

Filter by
Sorted by
Tagged with
0 votes
1 answer
473 views

Could there be malware in a video on twitter? [duplicate]

I don't know anything about security. I want to download the videos I like from twitter. And I'm not going to do it by writing a program. I will manually find the necessary link in the html document ...
user avatar
1 vote
1 answer
305 views

Can't log in into Twitter for Android app after SSL Bypass

I don't know if this is the right forum for this kind of question. I was trying to intercept traffic from Twitter for Android app and for that I needed to bypass the SSL pin they implemented. ...
user avatar
  • 21
0 votes
0 answers
89 views

Twitter OAuth signing process explanation

I was going through this process https://developer.twitter.com/en/docs/authentication/oauth-1-0a/obtaining-user-access-tokens and there are two points that do not make clear sense to me: Step 1: POST ...
user avatar
0 votes
2 answers
1k views

Can my oppressive government trace my Twitter activity and detect me?

I want to be active on Twitter against our oppressive government. Can my government trace and detect me? Twitter is banned here and we must use VPNs. I use Outline (Shadowsocks) mostly. Is there any ...
user avatar
  • 103
0 votes
1 answer
164 views

Twitter switching to 'mobile.twitter.com' after it detected the browser is outdated

What's going on is that, Twitter is switching me to their "mobile" site after it detected my browser was outdated. Factly I can still send Tweets, its just their mobile site. My experience with ...
user avatar
  • 432
1 vote
1 answer
983 views

How does Google Authenticator interact with apps on an iPhone?

I am clear on how Google Authenticator works when logging on to a website and I am clear on that. However, these days everyone is using apps for everything. The Twitter app, the Facebook app, the ...
user avatar
  • 21
45 votes
2 answers
13k views

Does this mean Target's twitter was successfully attacked?

I was just surprised to see this suspicious promoted tweet, asking me to send Bitcoins I added the hand-drawn red lines so I am not responsible for propagating the apparent scam. Clicking on the ...
user avatar
  • 1,767
10 votes
1 answer
2k views

Why don't Twitter and Facebook enforce password complexity during sign up? [closed]

If you try creating an account using your smartphone, these platforms don't seem to have strong password requirements. They both enforce a minimum 6 character limit and nothing else (I did however ...
user avatar
1 vote
0 answers
765 views

How to mask attack a sha256 hash with following information using hashcat?

I am hashcat newbie and I want to crack a hash :) The answer is 1-15 (unknown) characters and it may contain 'a-z' 'A-Z' '0-9' and '_' . (A Twitter username) How may I mask attack a hash with above ...
user avatar
1 vote
2 answers
1k views

Twitter allows the password to be resolved from a stolen cookie. Is that a problem? [closed]

I recently discovered and reported a security vulnerability to Twitter: Despite my belief that the report it indeed valid, they replied to me with the following response: As far as I can tell, this ...
user avatar
0 votes
2 answers
1k views

How to store user credentials in a web application? [closed]

I use the Twitter API in my app. I used to store the OAuth 2 tokens of the associated Twitter account within an application config. But now the application's users have to be able, using the web ...
user avatar
-1 votes
1 answer
3k views

How can someone hack Twitter accounts so fast? [closed]

You may have heard the news about ISIS twitter accounts hacked in light of the Orlando shootings. I am wondering how can it happen so fast (just 2 days after the incident) and what kind of technique ...
user avatar
  • 2,868
3 votes
2 answers
855 views

Is it secure: unsecured Wi-Fi + social network authentication to access the web?

Recently I visited my dental office and noticed a Wi-Fi configuration I haven't seen before. First, there is unsecured (no password) Wi-Fi, but I cannot surf the web yet. I am redirected to a webpage ...
user avatar
  • 247
5 votes
1 answer
402 views

SSL certificate issued in my company's name instead of twitter.com

When I open twitter.com in my browser, I can see the SSL certificate is issued in the name of my company instead of twitter.com. What is this actually?
user avatar
0 votes
3 answers
933 views

Does allowing Facebook cookies over Tor threaten my anonymity?

I was using Facebook on Tor without problem - I made no modifications to Tor, I just installed it and used it (except I had to do verification of identifying friends on login). I just switched to ...
user avatar
1 vote
1 answer
135 views

Are social media websites a security risk? If yes, how do we go about making them safer for users? [closed]

Generally speaking, I'm looking at a business environment. I know that Facebook Ads are not vetted and can contain malware, also users can share files on some social media sites. But what else is ...
user avatar
  • 1,459
-1 votes
1 answer
899 views

Twitter phone verification while on Tor [closed]

Twitter locked me out of my account. I can log in but I can't do anything with it until I give them a phone number. I've had the account for years but they've decided now there's "suspicious ...
user avatar
1 vote
0 answers
64 views

Why doesn't the most powerful/powerful sites on the internet use Extended Validation SSL certificates? [duplicate]

Why does some of the biggest internet companies not use an Extended Validated certificate which makes the address bar would be green and more secure? I have noticed that Facebook, Google, Amazon the ...
user avatar
1 vote
1 answer
156 views

Someone updated my friend's twitter profile after an internet forum abuse [closed]

I'm doing a security investigation for a friend of mine, working a bit of a Sherlock Holmes here... Trying to figure out a possible hack scenario for the following: My friend receives a "screw you ...
user avatar
1 vote
4 answers
1k views

External JS Security

I've worked mostly with backend processing stuff. I've been assigned to figure out how to secure external Javascript that we import from sources like Facebook, Twitter and Google. One option is ...
user avatar
-1 votes
2 answers
216 views

How can I tell if a website is sharing what videos I'm watching without my consent?

It seems that publishers are getting sued or threatened for possibly sharing video watching information - information that an individual has watched a video, before this individual has explicitly ...
user avatar
3 votes
3 answers
944 views

What makes twitter different than other sites regarding users anonymity [closed]

Why do we hear everyday about people getting prosecuted because of comments they made on twitter but not on Facebook or reddit? I know very little about social media but it's not that difficult to ...
user avatar
  • 8,763
1 vote
2 answers
134 views

Is it normal if user gets logged in Facebook or Twitter after they use Like or Tweet button? [closed]

Personally I don't use social networks, so I'm not sure about their behaviour. Currently I must code website which heavily depends on "Likes" and "Tweets" about articles. Each article has Like and ...
user avatar
9 votes
5 answers
427k views

Can you still be tracked when using a VPN?

If I am using a VPN to connect to Twitter, can an organisation like Anonymous or Lulzec track me and find out my identity?
user avatar
  • 109
-5 votes
3 answers
4k views

Tracking Twitter users [closed]

Is it possible to get the IP address of the person who posted a comment on my Twitter profile?
user avatar
  • 9
3 votes
1 answer
1k views

How did the Tweetdeck XSS vulnerability work?

How exactly did the recent TweetDeck vulnerability work? It says here that it had something to do with the HTML heart character but I don't fully understand what the explanation means. From the link: ...
user avatar
  • 213
1 vote
0 answers
364 views

How do I get the Access-Token and Access-Token-Secret?

Can anyone explain me these terms with respect to OAuth ? Consumer Key Consumer Secret Access Token Access Token Secret Also, when I registered my application with twitter I got the consumer key ...
user avatar
1 vote
2 answers
551 views

Is Tweetdeck authentication really safe?

I have recently installed Tweetdeck, because my previous client stopped working. In my custom client, and in the third party client I have used previously I had to setup authorize the application in ...
user avatar
  • 243
6 votes
2 answers
1k views

How is HTTPS Everywhere leaking my Twitter session from an incognito window?

I manage a couple of twitter accounts for businesses/websites that are separate from my personal account. For simplicity, I prefer to log in from an incognito window so that I don't need to log out of ...
user avatar
  • 203
6 votes
1 answer
2k views

Oauth Consumer Secret?

Using OAuth you have a consumer key and consumer secret to identify your application and the user provides an OAuth access token and secret to authenticate your application access to their account, ...
user avatar
  • 160
2 votes
1 answer
592 views

Twitter.com in private browsing leaks data to normal browser. Other sites as well? Bug or feature?

This is the first time I encountered similar thing. When I log into the Twitter web site in Chrome (namely, the Iron version which is said to be security enhanced, but that does not matter here) in ...
user avatar
  • 1,141
12 votes
2 answers
445 views

Preventing Voter Fraud on a Social Media Contest

I'm creating a contest that will allow users to login using their Facebook & Twitter accounts and submit votes on videos. My clients concern is that users will game the system by logging into ...
user avatar
0 votes
2 answers
217 views

Why do services like Twitter have tokens and secrets for 3rd party apps?

I noticed that if you have a 3rd-party Twitter app, you get an access token, and an access token secret, to communicate with Twitter. Why are there two codes? Shouldn't one be enough? Does this mean ...
user avatar
  • 103