Questions tagged [twitter]
Real-time information network that connects you to the latest stories, ideas, opinions and news about what you find interesting.
33
questions
0
votes
1answer
102 views
Could there be malware in a video on twitter? [duplicate]
I don't know anything about security.
I want to download the videos I like from twitter. And I'm not going to do it by writing a program. I will manually find the necessary link in the html document ...
1
vote
1answer
70 views
Can't log in into Twitter for Android app after SSL Bypass
I don't know if this is the right forum for this kind of question.
I was trying to intercept traffic from Twitter for Android app and for that I needed to bypass the SSL pin they implemented. ...
0
votes
0answers
52 views
Twitter OAuth signing process explanation
I was going through this process https://developer.twitter.com/en/docs/authentication/oauth-1-0a/obtaining-user-access-tokens and there are two points that do not make clear sense to me:
Step 1: POST ...
0
votes
2answers
768 views
Can my oppressive government trace my Twitter activity and detect me?
I want to be active on Twitter against our oppressive government. Can my government trace and detect me?
Twitter is banned here and we must use VPNs. I use Outline (Shadowsocks) mostly. Is there any ...
0
votes
1answer
125 views
Twitter switching to 'mobile.twitter.com' after it detected the browser is outdated
What's going on is that, Twitter is switching me to their "mobile" site after it detected my browser was outdated. Factly I can still send Tweets, its just their mobile site. My experience with ...
1
vote
1answer
886 views
How does Google Authenticator interact with apps on an iPhone?
I am clear on how Google Authenticator works when logging on to a website and I am clear on that.
However, these days everyone is using apps for everything. The Twitter app, the Facebook app, the ...
45
votes
2answers
13k views
Does this mean Target's twitter was successfully attacked?
I was just surprised to see this suspicious promoted tweet, asking me to send Bitcoins
I added the hand-drawn red lines so I am not responsible for propagating the apparent scam.
Clicking on the ...
10
votes
1answer
2k views
Why don't Twitter and Facebook enforce password complexity during sign up? [closed]
If you try creating an account using your smartphone, these platforms don't seem to have strong password requirements. They both enforce a minimum 6 character limit and nothing else (I did however ...
0
votes
0answers
640 views
How to mask attack a sha256 hash with following information using hashcat?
I am hashcat newbie and I want to crack a hash :)
The answer is 1-15 (unknown) characters and it may contain 'a-z' 'A-Z' '0-9' and '_' . (A Twitter username)
How may I mask attack a hash with above ...
1
vote
2answers
900 views
Twitter allows the password to be resolved from a stolen cookie. Is that a problem? [closed]
I recently discovered and reported a security vulnerability to Twitter:
Despite my belief that the report it indeed valid, they replied to me with the following response:
As far as I can tell, this ...
0
votes
2answers
970 views
How to store user credentials in a web application? [closed]
I use the Twitter API in my app. I used to store the OAuth 2 tokens of the associated Twitter account within an application config.
But now the application's users have to be able, using the web ...
-1
votes
1answer
2k views
How can someone hack Twitter accounts so fast? [closed]
You may have heard the news about ISIS twitter accounts hacked in light of the Orlando shootings. I am wondering how can it happen so fast (just 2 days after the incident) and what kind of technique ...
3
votes
2answers
807 views
Is it secure: unsecured Wi-Fi + social network authentication to access the web?
Recently I visited my dental office and noticed a Wi-Fi configuration I haven't seen before. First, there is unsecured (no password) Wi-Fi, but I cannot surf the web yet. I am redirected to a webpage ...
5
votes
1answer
363 views
SSL certificate issued in my company's name instead of twitter.com
When I open twitter.com in my browser, I can see the SSL certificate is issued in the name of my company instead of twitter.com. What is this actually?
0
votes
3answers
789 views
Does allowing Facebook cookies over TOR threaten my anonymity?
I was using Facebook on TOR without problem - I made no modifications to TOR, I just installed it and used it (except I had to do verification of identifying friends on login).
I just switched to ...
1
vote
1answer
101 views
Are social media websites a security risk? If yes, how do we go about making them safer for users? [closed]
Generally speaking, I'm looking at a business environment. I know that Facebook Ads are not vetted and can contain malware, also users can share files on some social media sites. But what else is ...
-1
votes
1answer
836 views
Twitter phone verification while on Tor [closed]
Twitter locked me out of my account. I can log in but I can't do anything with it until I give them a phone number.
I've had the account for years but they've decided now there's "suspicious ...
1
vote
0answers
61 views
Why doesn't the most powerful/powerful sites on the internet use Extended Validation SSL certificates? [duplicate]
Why does some of the biggest internet companies not use an Extended Validated certificate which makes the address bar would be green and more secure?
I have noticed that Facebook, Google, Amazon the ...
1
vote
1answer
117 views
Someone updated my friend's twitter profile after an internet forum abuse [closed]
I'm doing a security investigation for a friend of mine, working a bit of a Sherlock Holmes here... Trying to figure out a possible hack scenario for the following:
My friend receives a "screw you ...
1
vote
4answers
1k views
External JS Security
I've worked mostly with backend processing stuff.
I've been assigned to figure out how to secure external Javascript that we import from sources like Facebook, Twitter and Google.
One option is ...
-1
votes
2answers
180 views
How can I tell if a website is sharing what videos I'm watching without my consent?
It seems that publishers are getting sued or threatened for possibly sharing video watching information - information that an individual has watched a video, before this individual has explicitly ...
3
votes
3answers
904 views
What makes twitter different than other sites regarding users anonymity [closed]
Why do we hear everyday about people getting prosecuted because of comments they made on twitter but not on Facebook or reddit?
I know very little about social media but it's not that difficult to ...
1
vote
2answers
99 views
Is it normal if user gets logged in Facebook or Twitter after they use Like or Tweet button? [closed]
Personally I don't use social networks, so I'm not sure about their behaviour. Currently I must code website which heavily depends on "Likes" and "Tweets" about articles. Each article has Like and ...
9
votes
5answers
413k views
Can you still be tracked when using a VPN?
If I am using a VPN to connect to Twitter, can an organisation like Anonymous or Lulzec track me and find out my identity?
-5
votes
3answers
4k views
Tracking Twitter users [closed]
Is it possible to get the IP address of the person who posted a comment on my Twitter profile?
3
votes
1answer
1k views
How did the Tweetdeck XSS vulnerability work?
How exactly did the recent TweetDeck vulnerability work? It says here that it had something to do with the HTML heart character but I don't fully understand what the explanation means. From the link:
...
1
vote
0answers
322 views
How do I get the Access-Token and Access-Token-Secret?
Can anyone explain me these terms with respect to OAuth ?
Consumer Key
Consumer Secret
Access Token
Access Token Secret
Also, when I registered my application with twitter I got the consumer key ...
1
vote
2answers
505 views
Is Tweetdeck authentication really safe?
I have recently installed Tweetdeck, because my previous client stopped working.
In my custom client, and in the third party client I have used previously I had to setup authorize the application in ...
6
votes
2answers
1k views
How is HTTPS Everywhere leaking my Twitter session from an incognito window?
I manage a couple of twitter accounts for businesses/websites that are separate from my personal account. For simplicity, I prefer to log in from an incognito window so that I don't need to log out of ...
5
votes
1answer
2k views
Oauth Consumer Secret?
Using OAuth you have a consumer key and consumer secret to identify your application and the user provides an OAuth access token and secret to authenticate your application access to their account, ...
2
votes
1answer
523 views
Twitter.com in private browsing leaks data to normal browser. Other sites as well? Bug or feature?
This is the first time I encountered similar thing. When I log into the Twitter web site in Chrome (namely, the Iron version which is said to be security enhanced, but that does not matter here) in ...
12
votes
2answers
407 views
Preventing Voter Fraud on a Social Media Contest
I'm creating a contest that will allow users to login using their Facebook & Twitter accounts and submit votes on videos. My clients concern is that users will game the system by logging into ...
0
votes
2answers
182 views
Why do services like Twitter have tokens and secrets for 3rd party apps?
I noticed that if you have a 3rd-party Twitter app, you get an access token, and an access token secret, to communicate with Twitter.
Why are there two codes? Shouldn't one be enough?
Does this mean ...
