Peaches Posted February 4, 2009 Report Share Posted February 4, 2009 Twitter Clickjacking Hack Released A new proof-of-concept attack gains control of Twitter's "What are you doing?" update function Feb 03, 2009 | 02:54 PMBy Kelly Jackson Higgins DarkReading "A Web developer has released a proof-of-concept clickjacking attack targeting Twitter that demonstrates how an attacker could take over a member's "update" function on the microblogging site. In a nutshell, all it takes is for the victim to click on a seemingly innocent link on a Webpage while logged into Twitter, and then his or her "What are you doing?" status is under the attacker's control. "It means anyone can update your Twitter status without you knowing," says James Padolsey, the independent Web developer who wrote the PoC and published it on his Website. Clickjacking is an attack where a bad guy slips a malicious link invisibly onto a Webpage or under a commonly used button on a Website. When the user clicks on the link or rolls his mouse over the link, he becomes infected. Microsoft has included a new clickjacking protection feature in Internet Explorer 8 that lets Websites safeguard their sites and visitors without browser add-ons. Padolsey's PoC isn't the first one demonstrated on Twitter, but it's an interesting twist, security experts say. Another researcher created and released one previously. " Story at DarkReading: http://www.darkreading.com/security/vulner...ies+and+threats Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.