Questions tagged [twitter]
Real-time information network that connects you to the latest stories, ideas, opinions and news about what you find interesting.
33
questions
0
votes
1
answer
473
views
Could there be malware in a video on twitter? [duplicate]
I don't know anything about security.
I want to download the videos I like from twitter. And I'm not going to do it by writing a program. I will manually find the necessary link in the html document ...
- 1
1
vote
1
answer
305
views
Can't log in into Twitter for Android app after SSL Bypass
I don't know if this is the right forum for this kind of question.
I was trying to intercept traffic from Twitter for Android app and for that I needed to bypass the SSL pin they implemented. ...
- 21
0
votes
0
answers
89
views
Twitter OAuth signing process explanation
I was going through this process https://developer.twitter.com/en/docs/authentication/oauth-1-0a/obtaining-user-access-tokens and there are two points that do not make clear sense to me:
Step 1: POST ...
0
votes
2
answers
1k
views
Can my oppressive government trace my Twitter activity and detect me?
I want to be active on Twitter against our oppressive government. Can my government trace and detect me?
Twitter is banned here and we must use VPNs. I use Outline (Shadowsocks) mostly. Is there any ...
- 103
0
votes
1
answer
164
views
Twitter switching to 'mobile.twitter.com' after it detected the browser is outdated
What's going on is that, Twitter is switching me to their "mobile" site after it detected my browser was outdated. Factly I can still send Tweets, its just their mobile site. My experience with ...
- 432
1
vote
1
answer
983
views
How does Google Authenticator interact with apps on an iPhone?
I am clear on how Google Authenticator works when logging on to a website and I am clear on that.
However, these days everyone is using apps for everything. The Twitter app, the Facebook app, the ...
- 21
45
votes
2
answers
13k
views
Does this mean Target's twitter was successfully attacked?
I was just surprised to see this suspicious promoted tweet, asking me to send Bitcoins
I added the hand-drawn red lines so I am not responsible for propagating the apparent scam.
Clicking on the ...
- 1,767
10
votes
1
answer
2k
views
Why don't Twitter and Facebook enforce password complexity during sign up? [closed]
If you try creating an account using your smartphone, these platforms don't seem to have strong password requirements. They both enforce a minimum 6 character limit and nothing else (I did however ...
- 251
1
vote
0
answers
765
views
How to mask attack a sha256 hash with following information using hashcat?
I am hashcat newbie and I want to crack a hash :)
The answer is 1-15 (unknown) characters and it may contain 'a-z' 'A-Z' '0-9' and '_' . (A Twitter username)
How may I mask attack a hash with above ...
user189730
1
vote
2
answers
1k
views
Twitter allows the password to be resolved from a stolen cookie. Is that a problem? [closed]
I recently discovered and reported a security vulnerability to Twitter:
Despite my belief that the report it indeed valid, they replied to me with the following response:
As far as I can tell, this ...
- 119
0
votes
2
answers
1k
views
How to store user credentials in a web application? [closed]
I use the Twitter API in my app. I used to store the OAuth 2 tokens of the associated Twitter account within an application config.
But now the application's users have to be able, using the web ...
- 101
-1
votes
1
answer
3k
views
How can someone hack Twitter accounts so fast? [closed]
You may have heard the news about ISIS twitter accounts hacked in light of the Orlando shootings. I am wondering how can it happen so fast (just 2 days after the incident) and what kind of technique ...
- 2,868
3
votes
2
answers
855
views
Is it secure: unsecured Wi-Fi + social network authentication to access the web?
Recently I visited my dental office and noticed a Wi-Fi configuration I haven't seen before. First, there is unsecured (no password) Wi-Fi, but I cannot surf the web yet. I am redirected to a webpage ...
- 247
5
votes
1
answer
402
views
SSL certificate issued in my company's name instead of twitter.com
When I open twitter.com in my browser, I can see the SSL certificate is issued in the name of my company instead of twitter.com. What is this actually?
- 124
0
votes
3
answers
933
views
Does allowing Facebook cookies over Tor threaten my anonymity?
I was using Facebook on Tor without problem - I made no modifications to Tor, I just installed it and used it (except I had to do verification of identifying friends on login).
I just switched to ...
1
vote
1
answer
135
views
Are social media websites a security risk? If yes, how do we go about making them safer for users? [closed]
Generally speaking, I'm looking at a business environment. I know that Facebook Ads are not vetted and can contain malware, also users can share files on some social media sites. But what else is ...
- 1,459
-1
votes
1
answer
899
views
Twitter phone verification while on Tor [closed]
Twitter locked me out of my account. I can log in but I can't do anything with it until I give them a phone number.
I've had the account for years but they've decided now there's "suspicious ...
1
vote
0
answers
64
views
Why doesn't the most powerful/powerful sites on the internet use Extended Validation SSL certificates? [duplicate]
Why does some of the biggest internet companies not use an Extended Validated certificate which makes the address bar would be green and more secure?
I have noticed that Facebook, Google, Amazon the ...
- 277
1
vote
1
answer
156
views
Someone updated my friend's twitter profile after an internet forum abuse [closed]
I'm doing a security investigation for a friend of mine, working a bit of a Sherlock Holmes here... Trying to figure out a possible hack scenario for the following:
My friend receives a "screw you ...
- 111
1
vote
4
answers
1k
views
External JS Security
I've worked mostly with backend processing stuff.
I've been assigned to figure out how to secure external Javascript that we import from sources like Facebook, Twitter and Google.
One option is ...
-1
votes
2
answers
216
views
How can I tell if a website is sharing what videos I'm watching without my consent?
It seems that publishers are getting sued or threatened for possibly sharing video watching information - information that an individual has watched a video, before this individual has explicitly ...
- 101
3
votes
3
answers
944
views
What makes twitter different than other sites regarding users anonymity [closed]
Why do we hear everyday about people getting prosecuted because of comments they made on twitter but not on Facebook or reddit?
I know very little about social media but it's not that difficult to ...
- 8,763
1
vote
2
answers
134
views
Is it normal if user gets logged in Facebook or Twitter after they use Like or Tweet button? [closed]
Personally I don't use social networks, so I'm not sure about their behaviour. Currently I must code website which heavily depends on "Likes" and "Tweets" about articles. Each article has Like and ...
- 419
9
votes
5
answers
427k
views
Can you still be tracked when using a VPN?
If I am using a VPN to connect to Twitter, can an organisation like Anonymous or Lulzec track me and find out my identity?
- 109
-5
votes
3
answers
4k
views
Tracking Twitter users [closed]
Is it possible to get the IP address of the person who posted a comment on my Twitter profile?
- 9
3
votes
1
answer
1k
views
How did the Tweetdeck XSS vulnerability work?
How exactly did the recent TweetDeck vulnerability work? It says here that it had something to do with the HTML heart character but I don't fully understand what the explanation means. From the link:
...
- 213
1
vote
0
answers
364
views
How do I get the Access-Token and Access-Token-Secret?
Can anyone explain me these terms with respect to OAuth ?
Consumer Key
Consumer Secret
Access Token
Access Token Secret
Also, when I registered my application with twitter I got the consumer key ...
- 111
1
vote
2
answers
551
views
Is Tweetdeck authentication really safe?
I have recently installed Tweetdeck, because my previous client stopped working.
In my custom client, and in the third party client I have used previously I had to setup authorize the application in ...
- 243
6
votes
2
answers
1k
views
How is HTTPS Everywhere leaking my Twitter session from an incognito window?
I manage a couple of twitter accounts for businesses/websites that are separate from my personal account. For simplicity, I prefer to log in from an incognito window so that I don't need to log out of ...
- 203
6
votes
1
answer
2k
views
Oauth Consumer Secret?
Using OAuth you have a consumer key and consumer secret to identify your application and the user provides an OAuth access token and secret to authenticate your application access to their account, ...
- 160
2
votes
1
answer
592
views
Twitter.com in private browsing leaks data to normal browser. Other sites as well? Bug or feature?
This is the first time I encountered similar thing. When I log into the Twitter web site in Chrome (namely, the Iron version which is said to be security enhanced, but that does not matter here) in ...
- 1,141
12
votes
2
answers
445
views
Preventing Voter Fraud on a Social Media Contest
I'm creating a contest that will allow users to login using their Facebook & Twitter accounts and submit votes on videos. My clients concern is that users will game the system by logging into ...
- 123
0
votes
2
answers
217
views
Why do services like Twitter have tokens and secrets for 3rd party apps?
I noticed that if you have a 3rd-party Twitter app, you get an access token, and an access token secret, to communicate with Twitter.
Why are there two codes? Shouldn't one be enough?
Does this mean ...
- 103