Making a hashtag of Web 2.0 security
By John Leyden, 3rd July 2009
The Month Of Twitter Bugs has begun with the publication of a flaw in a URL shortening service often used in conjunction with the microblogging service. Four cross-site scripting (XSS) vulnerabilities in the bit.ly URL-shrinking service were published on Wednesday. TweetDeck, one of the most popular Twitter clients, integrates bit.ly, making the flaws much more risky than might otherwise be the case. Fortunately, three of the four bugs were fixed before an alert was published. The last flaw was addressed hours after the release of a notice via Twitpwn, the home page of the Month Of Twitter Bugs project. On Thursday, the Twitpwn project published details of a resolved cross-site scripting flaw in HootSuite toolbox. The Month of Bugs series was inaugurated three years ago with a four week period that offered a different browser bug every day. Originally, the brainchild of HD Moore, of Metasploit fame, noted researcher Aviv Raff is applying the idea to Twitter and associated service during July. He notes that the idea might just as easily be applied to any other Web 2.0 service.
Read more here -->Link
No comments:
Post a Comment