The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [twitter]

Real-time information network that connects you to the latest stories, ideas, opinions and news about what you find interesting.

Filter by
Sorted by
Tagged with
44
votes
2answers
13k views

Does this mean Target's twitter was successfully attacked?

I was just surprised to see this suspicious promoted tweet, asking me to send Bitcoins I added the hand-drawn red lines so I am not responsible for propagating the apparent scam. Clicking on the ...
12
votes
2answers
395 views

Preventing Voter Fraud on a Social Media Contest

I'm creating a contest that will allow users to login using their Facebook & Twitter accounts and submit votes on videos. My clients concern is that users will game the system by logging into ...
10
votes
1answer
1k views

Why don't Twitter and Facebook enforce password complexity during sign up? [closed]

If you try creating an account using your smartphone, these platforms don't seem to have strong password requirements. They both enforce a minimum 6 character limit and nothing else (I did however ...
6
votes
5answers
248k views

Can you still be tracked when using a VPN?

If I am using a VPN on twitter, can an organisation like Anonymous or Lulzec track me and find out my identity?
6
votes
2answers
1k views

How is HTTPS Everywhere leaking my Twitter session from an incognito window?

I manage a couple of twitter accounts for businesses/websites that are separate from my personal account. For simplicity, I prefer to log in from an incognito window so that I don't need to log out of ...
5
votes
1answer
326 views

SSL certificate issued in my company's name instead of twitter.com

When I open twitter.com in my browser, I can see the SSL certificate is issued in the name of my company instead of twitter.com. What is this actually?
5
votes
1answer
2k views

Oauth Consumer Secret?

Using OAuth you have a consumer key and consumer secret to identify your application and the user provides an OAuth access token and secret to authenticate your application access to their account, ...
3
votes
3answers
889 views

What makes twitter different than other sites regarding users anonymity [closed]

Why do we hear everyday about people getting prosecuted because of comments they made on twitter but not on Facebook or reddit? I know very little about social media but it's not that difficult to ...
3
votes
2answers
777 views

Is it secure: unsecured Wi-Fi + social network authentication to access the web?

Recently I visited my dental office and noticed a Wi-Fi configuration I haven't seen before. First, there is unsecured (no password) Wi-Fi, but I cannot surf the web yet. I am redirected to a webpage ...
3
votes
1answer
718 views

How did the Tweetdeck XSS vulnerability work?

How exactly did the recent TweetDeck vulnerability work? It says here that it had something to do with the HTML heart character but I don't fully understand what the explanation means. From the link: ...
2
votes
1answer
467 views

Twitter.com in private browsing leaks data to normal browser. Other sites as well? Bug or feature?

This is the first time I encountered similar thing. When I log into the Twitter web site in Chrome (namely, the Iron version which is said to be security enhanced, but that does not matter here) in ...
1
vote
4answers
719 views

External JS Security

I've worked mostly with backend processing stuff. I've been assigned to figure out how to secure external Javascript that we import from sources like Facebook, Twitter and Google. One option is ...
1
vote
1answer
114 views

Someone updated my friend's twitter profile after an internet forum abuse [closed]

I'm doing a security investigation for a friend of mine, working a bit of a Sherlock Holmes here... Trying to figure out a possible hack scenario for the following: My friend receives a "screw you ...
1
vote
2answers
466 views

Is Tweetdeck authentication really safe?

I have recently installed Tweetdeck, because my previous client stopped working. In my custom client, and in the third party client I have used previously I had to setup authorize the application in ...
1
vote
1answer
95 views

Are social media websites a security risk? If yes, how do we go about making them safer for users? [closed]

Generally speaking, I'm looking at a business environment. I know that Facebook Ads are not vetted and can contain malware, also users can share files on some social media sites. But what else is ...
1
vote
0answers
58 views

Why doesn't the most powerful/powerful sites on the internet use Extended Validation SSL certificates? [duplicate]

Why does some of the biggest internet companies not use an Extended Validated certificate which makes the address bar would be green and more secure? I have noticed that Facebook, Google, Amazon the ...
1
vote
2answers
97 views

Is it normal if user gets logged in Facebook or Twitter after they use Like or Tweet button? [closed]

Personally I don't use social networks, so I'm not sure about their behaviour. Currently I must code website which heavily depends on "Likes" and "Tweets" about articles. Each article has Like and ...
1
vote
0answers
311 views

How do I get the Access-Token and Access-Token-Secret?

Can anyone explain me these terms with respect to OAuth ? Consumer Key Consumer Secret Access Token Access Token Secret Also, when I registered my application with twitter I got the consumer key ...
0
votes
2answers
536 views

How to store user credentials in a web application? [closed]

I use the Twitter API in my app. I used to store the OAuth 2 tokens of the associated Twitter account within an application config. But now the application's users have to be able, using the web ...
0
votes
1answer
102 views

Twitter switching to 'mobile.twitter.com' after it detected the browser is outdated

What's going on is that, Twitter is switching me to their "mobile" site after it detected my browser was outdated. Factly I can still send Tweets, its just their mobile site. My experience with ...
0
votes
2answers
164 views

Why do services like Twitter have tokens and secrets for 3rd party apps?

I noticed that if you have a 3rd-party Twitter app, you get an access token, and an access token secret, to communicate with Twitter. Why are there two codes? Shouldn't one be enough? Does this mean ...
0
votes
1answer
360 views

How does Google Authenticator interact with apps on an iPhone?

I am clear on how Google Authenticator works when logging on to a website and I am clear on that. However, these days everyone is using apps for everything. The Twitter app, the Facebook app, the ...
0
votes
2answers
596 views

Twitter allows the password to be resolved from a stolen cookie. Is that a problem? [closed]

I recently discovered and reported a security vulnerability to Twitter: Despite my belief that the report it indeed valid, they replied to me with the following response: As far as I can tell, this ...
0
votes
0answers
38 views

Does an OAuth1.0a HTTP GET endpoint in my API present a security vulnerability?

I'm building a hobby application, and I'd prefer it not end up on a cyber-security expert's list of insecure sites. My application can post to Twitter on behalf of a user. This required implementing ...
0
votes
0answers
364 views

How to mask attack a sha256 hash with following information using hashcat?

I am hashcat newbie and I want to crack a hash :) The answer is 1-15 (unknown) characters and it may contain 'a-z' 'A-Z' '0-9' and '_' . (A Twitter username) How may I mask attack a hash with above ...
0
votes
3answers
630 views

Does allowing Facebook cookies over TOR threaten my anonymity?

I was using Facebook on TOR without problem - I made no modifications to TOR, I just installed it and used it (except I had to do verification of identifying friends on login). I just switched to ...
-1
votes
1answer
2k views

How can someone hack Twitter accounts so fast? [closed]

You may have heard the news about ISIS twitter accounts hacked in light of the Orlando shootings. I am wondering how can it happen so fast (just 2 days after the incident) and what kind of technique ...
-1
votes
1answer
788 views

Twitter phone verification while on Tor [closed]

Twitter locked me out of my account. I can log in but I can't do anything with it until I give them a phone number. I've had the account for years but they've decided now there's "suspicious ...
-1
votes
2answers
176 views

How can I tell if a website is sharing what videos I'm watching without my consent?

It seems that publishers are getting sued or threatened for possibly sharing video watching information - information that an individual has watched a video, before this individual has explicitly ...
-5
votes
3answers
3k views

Tracking Twitter users [closed]

Is it possible to get the IP address of the person who posted a comment on my Twitter profile?